MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8dc773eb583f0ed30ec1e54c129bff1f0490eaaae9be41980a4fb8e0991764c5. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Formbook


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 8dc773eb583f0ed30ec1e54c129bff1f0490eaaae9be41980a4fb8e0991764c5
SHA3-384 hash: 6622d8453b2c4df9239f16870451c0569c8211f30912b32af2f501f6ac18ef37d06241948b68e6a1c49f84e3c9a99e27
SHA1 hash: 998eb7b6f38f5da08deb3c08222d9ad2edb83d3e
MD5 hash: 8c8c0838901a3c4bbb85ec53d23eb9d6
humanhash: item-avocado-harry-delta
File name:SKM_1200942345.img
Download: download sample
Signature Formbook
Create hunting rule
File size:1'376'256 bytes
First seen:2020-10-12 06:15:28 UTC
Last seen:Never
File type: img
MIME type:application/x-iso9660-image
ssdeep 12288:aMOLqh0P6ADQutFrTE02VVJDKNY1WXK3iOgjjG35SljlVYjt/MgIi8D6Z:2LMy6AbPE0eVANYYX6gj65SlBG8Dy
TLSH 9555E06137E55B82E1BE8BF50624115043F57A1B396EF20D3DCA29EF5AB4F818A10F63
Reporter abuse_ch
Tags:FormBook img


Avatar
abuse_ch
Malspam distributing Formbook:

HELO: tele-grup.ro
Sending IP: 46.102.249.123
From: luminita@tele-grup.ro
Subject: Re: Order
Attachment: SKM_1200942345.img (contains "SKM1200942Pdf.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
90
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/8dc773eb583f0ed30ec1e54c129bff1f0490eaaae9be41980a4fb8e0991764c5/
Threat name:
ByteCode-MSIL.Trojan.Taskun
Create hunting rule
Status:
Malicious
First seen:
2020-10-12 02:52:44 UTC
AV detection:
15 of 48 (31.25%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=rxdxh22yh4hngdwb4vgbfg77d4cjb2vk5g7edgakj64obgixmtcq._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Formbook
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/8dc773eb583f0ed30ec1e54c129bff1f0490eaaae9be41980a4fb8e0991764c5

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Formbook

img 8dc773eb583f0ed30ec1e54c129bff1f0490eaaae9be41980a4fb8e0991764c5

(this sample)

Formbook

Executable exe 15d71d7a0b659fa5429a2e96d9185dad6aca0fe201dfa802b7fd0ef2b8211c76

  
Dropping
MD5 87abe4fdec140cc98b1ef54b8311960b
  
Dropping
Formbook
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 15d71d7a0b659fa5429a2e96d9185dad6aca0fe201dfa802b7fd0ef2b8211c76

Comments