MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 76f741f34e046d7ee29880a7ed26c404d9a6edf11e9f37ff76afe8be751df3a2. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Formbook
Vendor detections: 4
| SHA256 hash: | 76f741f34e046d7ee29880a7ed26c404d9a6edf11e9f37ff76afe8be751df3a2 |
|---|---|
| SHA3-384 hash: | 192d3f35b7a272cca98d8551872638f1dd72173c2439afc5813cfb28291d488d45266ea851d6ba35b5b302680419c4c1 |
| SHA1 hash: | 113e8cc61db4de26396d7e2050c3c7553a53f8c8 |
| MD5 hash: | 83711630ebe5669774b448661df2af0e |
| humanhash: | jig-green-colorado-queen |
| File name: | Proforma_Invoice_SWD173647_3vey_REfR-32JdhY.pdf.zip |
| Download: | download sample |
| Signature | Formbook |
| File size: | 445'258 bytes |
| First seen: | 2020-08-11 14:11:48 UTC |
| Last seen: | Never |
| File type: | zip |
| MIME type: | application/zip |
| ssdeep | 12288:lxL9vEuyKGzBIuX5CD2gXtwtwddscWxaMzIGjbiZqmSZ6rsF:lQJEDvXOtrJsMMuFhRF |
| TLSH | C494230342807FF54E10DC6235FD866B622D78CD64CEF5EA1EBBB1891AF2B09490D6D2 |
| Reporter |  abuse_ch |
| Tags: | FormBook zip |
abuse_ch
Malspam distributing unidentified malware:HELO: synergynorth.com
Sending IP: 111.90.138.173
From: msmit@synergynorth.com
Subject: RE: 45264-61M00ใ่ฆ็ฉใไพ้ ผใฎไปถ // Bank Account for Payment //Process Control Standard (45264-61M00 Request for quotation // Bank Account for Payment //Process Control Standard
Attachment: Proforma_Invoice_SWD173647_3vey_REfR-32JdhY.pdf.zip (contains "Profoma_Invoice_SWD173647_3vey_REfR-32JdhY_PDF.exe")
Intelligence
File Origin
# of uploads :
1
# of downloads :
66
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Status:
Malicious
First seen:
2020-08-11 14:13:04 UTC
AV detection:
23 of 29 (79.31%)
Threat level:
5/5
Detection(s):
Suspicious file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Malspam
exe Delivery method
Distributed via e-mail attachment
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.