MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8df5b45068f0db6e7c557e62625444e14e5611f36682453ce80210cd1ec82820. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Formbook


Vendor detections: 16


Intelligence 16 IOCs YARA 2 File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 8df5b45068f0db6e7c557e62625444e14e5611f36682453ce80210cd1ec82820
SHA3-384 hash: 22ca52495a1b801eefed35bbad88dd56a0ff2d32195fd394aadff21a1f510ef89eacc986d6f89c8e9684ed7d0396bed4
SHA1 hash: 815da5fef9414c67b0d8bbe29e0ba54d6b21aa7b
MD5 hash: 9b83e74569158b67e894070b708188ae
humanhash: pluto-oranges-island-utah
File name:8df5b45068f0db6e7c557e62625444e14e5611f36682453ce80210cd1ec82820
Download: download sample
Signature Formbook
Create hunting rule
File size:820'736 bytes
First seen:2023-07-05 10:39:32 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash f34d5f2d4577ed6d9ceec516c1f5a744 (48'649 x AgentTesla, 19'461 x Formbook, 12'202 x SnakeKeylogger)
ssdeep 12288:moAcuF6mn1DHLZnvJaEiOe42KMu/N3mWhQmwmJCMpUM4I1iF7wNzQ9h3nYmua85r:kiOV/NOauIwF7wN0rom65PVM+UJBmLR
Threatray 3'474 similar samples on MalwareBazaar
TLSH T137050108B3FA842FC1AF3FBC0C646130C7F8B1563463D79B5D56A9CD8D59B148AA16A3
TrID 63.0% (.EXE) Generic CIL Executable (.NET, Mono, etc.) (73123/4/13)
11.2% (.SCR) Windows screen saver (13097/50/3)
9.0% (.EXE) Win64 Executable (generic) (10523/12/4)
5.6% (.DLL) Win32 Dynamic Link Library (generic) (6578/25/2)
3.8% (.EXE) Win32 Executable (generic) (4505/5/1)
File icon (PE):PE icon
dhash icon 30e0e48484c4e030 (8 x AgentTesla, 5 x Loki, 5 x Formbook)
Reporter adrian__luca
Tags:exe FormBook

Intelligence

File Origin
# of uploads :
1
# of downloads :
274
Origin country :
HU HU
Vendor Threat Intelligence
Malware family:
n/a
ID:
1
File name:
8df5b45068f0db6e7c557e62625444e14e5611f36682453ce80210cd1ec82820
Verdict:
No threats detected
Analysis date:
2023-07-05 10:38:36 UTC
Tags:
n/a
Link:
https://app.any.run/tasks/bdacbc3d-e15a-4953-b658-dbd9ab8e072b

Note:
ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample
Detection:
Formbook
Create hunting rule
Link:
https://www.capesandbox.com/analysis/407436/
Detection(s):
SecuriteInfo.com.Trojan.GenericKD.67488571.11601.12024.UNOFFICIAL
Create hunting rule

Result
Verdict:
Malware
Maliciousness:

Behaviour
Creating a window
Restart of the analyzed sample
Verdict:
Likely Malicious
Threat level:
  7.5/10
Confidence:
100%
Tags:
formbook packed
Link:
https://www.filescan.io/uploads/64a54884dfc53aa652de975e/reports/d5685fac-84af-4019-be06-ffca01dbab53/overview
Verdict:
Malicious
Labled as:
Win/malicious_confidence_100%
Link:
https://www.hybrid-analysis.com/sample/8df5b45068f0db6e7c557e62625444e14e5611f36682453ce80210cd1ec82820
Result
Verdict:
MALICIOUS
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Malware family:
Formbook
Create hunting rule
Verdict:
Malicious
Link:
https://analyze.intezer.com/analyses/171894e3-303d-43d2-a11d-d32860b5a24a
Result
Threat name:
FormBook
Create hunting rule
Detection:
malicious
Classification:
troj.evad
Score:
100 / 100
Link:
https://www.joesandbox.com/analysis/1267148
Signature
.NET source code contains potential unpacker
Antivirus detection for URL or domain
C2 URLs / IPs found in malware configuration
Found malware configuration
Malicious sample detected (through community Yara rule)
Maps a DLL or memory area into another process
Modifies the context of a thread in another process (thread injection)
Modifies the prolog of user mode functions (user mode inline hooks)
Multi AV Scanner detection for submitted file
Queues an APC in another process (thread injection)
Sample uses process hollowing technique
System process connects to network (likely due to code injection or exploit)
Tries to detect virtualization through RDTSC time measurements
Yara detected FormBook
Behaviour
Behavior Graph:
Download SVG
behaviorgraph top1 signatures2 2 Behavior Graph ID: 1267148 Sample: mtiMDVk8aQ.exe Startdate: 05/07/2023 Architecture: WINDOWS Score: 100 38 Found malware configuration 2->38 40 Malicious sample detected (through community Yara rule) 2->40 42 Antivirus detection for URL or domain 2->42 44 5 other signatures 2->44 10 mtiMDVk8aQ.exe 3 2->10         started        process3 file4 30 C:\Users\user\AppData\...\mtiMDVk8aQ.exe.log, ASCII 10->30 dropped 54 Tries to detect virtualization through RDTSC time measurements 10->54 14 mtiMDVk8aQ.exe 10->14         started        17 mtiMDVk8aQ.exe 10->17         started        signatures5 process6 signatures7 56 Modifies the context of a thread in another process (thread injection) 14->56 58 Maps a DLL or memory area into another process 14->58 60 Sample uses process hollowing technique 14->60 62 Queues an APC in another process (thread injection) 14->62 19 explorer.exe 1 1 14->19 injected process8 dnsIp9 32 barrickgold.shop 164.52.195.96, 49700, 80 NETMAGIC-APNetmagicDatacenterMumbaiIN India 19->32 34 www.tsetsetse.africa 19->34 36 3 other IPs or domains 19->36 46 System process connects to network (likely due to code injection or exploit) 19->46 23 wlanext.exe 19->23         started        signatures10 process11 signatures12 48 Modifies the context of a thread in another process (thread injection) 23->48 50 Maps a DLL or memory area into another process 23->50 52 Tries to detect virtualization through RDTSC time measurements 23->52 26 cmd.exe 1 23->26         started        process13 process14 28 conhost.exe 26->28         started       
Detection:
formbook
Create hunting rule
Link:
https://mwdb.cert.pl/sample/8df5b45068f0db6e7c557e62625444e14e5611f36682453ce80210cd1ec82820/
Threat name:
Win32.Trojan.Leonem
Create hunting rule
Status:
Malicious
First seen:
2023-06-12 02:40:36 UTC
File Type:
PE (.Net Exe)
Extracted files:
17
AV detection:
18 of 24 (75.00%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=rx23iudi6dnw47cvpzrgevce4fhfmeptm2bekphiaiim2hwifaqa._file
Verdict:
malicious
Label(s):
formbook
Create hunting rule
Similar samples:
111c25bd4cd2f4771e7fec9e564c623218e06eb1b9d839cf58a9f117b4979ac0
Formbook
54b8c91ae0485d795f9821b01eb839bd682aee18df6a0b54d14d6eb2a2c0e83d
Formbook
6402781254bfa77827a02ef77d702ea6ccf0f3f0e01a6fada69105ce23b931e4
Formbook
76f01e4cfcfc115b4c26f3cae977d3390a6d205ed9ac87c74d471b3dda4bd4a2
Formbook
7b27316104c3d2f4eb69d4faa5f6cf1310558c4f528aefd03d87b19e52ee9820
Formbook
8e9c6b72a19705e65d654814d0770a67c7c4a2e52915f6115dc740ab254ed4a9
Formbook
c4c920d6d5d253db092a28210596c60b4377224251c3d14c4558a54346a71b75
Formbook
d67c1189b6abb48e8928dcf36705cc93589011229ee2a4506263ed725f9664cc
Formbook
e40bff3bb093b2bdc11d7e1d5a990db99b3a914dc74a1aec2d28662da10cde9b
Formbook
eecf01b70476c7cb2eeae32f85b0a1490fb40836ea13d28edebbe2e9b1576948
Formbook
+ 3'464 additional samples on MalwareBazaar
Result
Malware family:
formbook
Create hunting rule
Score:
  10/10
Tags:
family:formbook campaign:ga93 rat spyware stealer trojan
Link:
https://tria.ge/reports/230705-mqjj4sdb5y/
Behaviour
Suspicious behavior: EnumeratesProcesses
Suspicious use of AdjustPrivilegeToken
Suspicious use of WriteProcessMemory
Suspicious use of SetThreadContext
Formbook payload
Formbook
Unpacked files
SH256 hash:
0b45ded9f991e23530a7b6cf0c5899e373aeff8d6cda9dcb2ed6d5c18d75cb3d
MD5 hash:
3ab4fc80a90fcdb31b76062f31db22b2
SHA1 hash:
e6eb609b2b457d128b620bf2286e53e59962351c
Detections:
FormBook
Create hunting rule
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
FormBook
Create hunting rule
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
FormBook
Create hunting rule
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
FormBook
Create hunting rule
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
FormBook
Create hunting rule
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
Link:
https://www.unpac.me/results/5a21a625-6994-4e8a-ae3d-62c311155398/
Parent samples :
b1dac250b790090d75044bf149fb5e5372fed13d4c44999e4653a159d96c63b0
8df5b45068f0db6e7c557e62625444e14e5611f36682453ce80210cd1ec82820
136c006862c2262205fa40f61daaf18a5d4209bebc0236d7c8743ec554d0482e
SH256 hash:
5583a488e835e585c4f531be493df47e6e12f4c5fde8edb0a747f9c2e8b3e0a1
MD5 hash:
8926513a14e118841b8342442f3bbe92
SHA1 hash:
b38b8aad0b4d3fa96bfd214aea9ac9e451cf5f8b
Link:
https://www.unpac.me/results/5a21a625-6994-4e8a-ae3d-62c311155398/
SH256 hash:
f8dbc6077f6b01c6eec334061d687ff1b291a2aa5513cf1e0b5bde4a8dbc5588
MD5 hash:
15aab611795bcbf2758052944013be1a
SHA1 hash:
772a1002b111e117cf3b1e9f0cabda4894777399
Link:
https://www.unpac.me/results/5a21a625-6994-4e8a-ae3d-62c311155398/
SH256 hash:
04346b65f015d828402d306c0f9d15f4b5437cf45b67b5638e7e58a527db5e9e
MD5 hash:
ad0917027bda8997a6e18a0d0b7a2ab1
SHA1 hash:
475a0adceafff8b3ae39888724ec26e6c6dbb32d
Link:
https://www.unpac.me/results/5a21a625-6994-4e8a-ae3d-62c311155398/
SH256 hash:
9c45ec5465bf81a336d5b90fe721c0c7bd348ece97b89662bf399dea81850041
MD5 hash:
9e139961ce4f71960a0a8648b440093e
SHA1 hash:
164471f05971248e973599304a0744c2bda6c140
Link:
https://www.unpac.me/results/5a21a625-6994-4e8a-ae3d-62c311155398/
SH256 hash:
0b45ded9f991e23530a7b6cf0c5899e373aeff8d6cda9dcb2ed6d5c18d75cb3d
MD5 hash:
3ab4fc80a90fcdb31b76062f31db22b2
SHA1 hash:
e6eb609b2b457d128b620bf2286e53e59962351c
Detections:
FormBook
Create hunting rule
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
FormBook
Create hunting rule
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
FormBook
Create hunting rule
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
FormBook
Create hunting rule
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
FormBook
Create hunting rule
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
Link:
https://www.unpac.me/results/5a21a625-6994-4e8a-ae3d-62c311155398/
Parent samples :
b1dac250b790090d75044bf149fb5e5372fed13d4c44999e4653a159d96c63b0
8df5b45068f0db6e7c557e62625444e14e5611f36682453ce80210cd1ec82820
136c006862c2262205fa40f61daaf18a5d4209bebc0236d7c8743ec554d0482e
SH256 hash:
5583a488e835e585c4f531be493df47e6e12f4c5fde8edb0a747f9c2e8b3e0a1
MD5 hash:
8926513a14e118841b8342442f3bbe92
SHA1 hash:
b38b8aad0b4d3fa96bfd214aea9ac9e451cf5f8b
Link:
https://www.unpac.me/results/5a21a625-6994-4e8a-ae3d-62c311155398/
SH256 hash:
f8dbc6077f6b01c6eec334061d687ff1b291a2aa5513cf1e0b5bde4a8dbc5588
MD5 hash:
15aab611795bcbf2758052944013be1a
SHA1 hash:
772a1002b111e117cf3b1e9f0cabda4894777399
Link:
https://www.unpac.me/results/5a21a625-6994-4e8a-ae3d-62c311155398/
SH256 hash:
04346b65f015d828402d306c0f9d15f4b5437cf45b67b5638e7e58a527db5e9e
MD5 hash:
ad0917027bda8997a6e18a0d0b7a2ab1
SHA1 hash:
475a0adceafff8b3ae39888724ec26e6c6dbb32d
Link:
https://www.unpac.me/results/5a21a625-6994-4e8a-ae3d-62c311155398/
SH256 hash:
9c45ec5465bf81a336d5b90fe721c0c7bd348ece97b89662bf399dea81850041
MD5 hash:
9e139961ce4f71960a0a8648b440093e
SHA1 hash:
164471f05971248e973599304a0744c2bda6c140
Link:
https://www.unpac.me/results/5a21a625-6994-4e8a-ae3d-62c311155398/
SH256 hash:
0b45ded9f991e23530a7b6cf0c5899e373aeff8d6cda9dcb2ed6d5c18d75cb3d
MD5 hash:
3ab4fc80a90fcdb31b76062f31db22b2
SHA1 hash:
e6eb609b2b457d128b620bf2286e53e59962351c
Detections:
FormBook
Create hunting rule
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
FormBook
Create hunting rule
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
FormBook
Create hunting rule
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
FormBook
Create hunting rule
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
FormBook
Create hunting rule
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
Link:
https://www.unpac.me/results/5a21a625-6994-4e8a-ae3d-62c311155398/
Parent samples :
b1dac250b790090d75044bf149fb5e5372fed13d4c44999e4653a159d96c63b0
8df5b45068f0db6e7c557e62625444e14e5611f36682453ce80210cd1ec82820
136c006862c2262205fa40f61daaf18a5d4209bebc0236d7c8743ec554d0482e
SH256 hash:
5583a488e835e585c4f531be493df47e6e12f4c5fde8edb0a747f9c2e8b3e0a1
MD5 hash:
8926513a14e118841b8342442f3bbe92
SHA1 hash:
b38b8aad0b4d3fa96bfd214aea9ac9e451cf5f8b
Link:
https://www.unpac.me/results/5a21a625-6994-4e8a-ae3d-62c311155398/
SH256 hash:
f8dbc6077f6b01c6eec334061d687ff1b291a2aa5513cf1e0b5bde4a8dbc5588
MD5 hash:
15aab611795bcbf2758052944013be1a
SHA1 hash:
772a1002b111e117cf3b1e9f0cabda4894777399
Link:
https://www.unpac.me/results/5a21a625-6994-4e8a-ae3d-62c311155398/
SH256 hash:
04346b65f015d828402d306c0f9d15f4b5437cf45b67b5638e7e58a527db5e9e
MD5 hash:
ad0917027bda8997a6e18a0d0b7a2ab1
SHA1 hash:
475a0adceafff8b3ae39888724ec26e6c6dbb32d
Link:
https://www.unpac.me/results/5a21a625-6994-4e8a-ae3d-62c311155398/
SH256 hash:
9c45ec5465bf81a336d5b90fe721c0c7bd348ece97b89662bf399dea81850041
MD5 hash:
9e139961ce4f71960a0a8648b440093e
SHA1 hash:
164471f05971248e973599304a0744c2bda6c140
Link:
https://www.unpac.me/results/5a21a625-6994-4e8a-ae3d-62c311155398/
SH256 hash:
0b45ded9f991e23530a7b6cf0c5899e373aeff8d6cda9dcb2ed6d5c18d75cb3d
MD5 hash:
3ab4fc80a90fcdb31b76062f31db22b2
SHA1 hash:
e6eb609b2b457d128b620bf2286e53e59962351c
Detections:
FormBook
Create hunting rule
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
FormBook
Create hunting rule
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
FormBook
Create hunting rule
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
FormBook
Create hunting rule
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
FormBook
Create hunting rule
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
Link:
https://www.unpac.me/results/5a21a625-6994-4e8a-ae3d-62c311155398/
Parent samples :
b1dac250b790090d75044bf149fb5e5372fed13d4c44999e4653a159d96c63b0
8df5b45068f0db6e7c557e62625444e14e5611f36682453ce80210cd1ec82820
136c006862c2262205fa40f61daaf18a5d4209bebc0236d7c8743ec554d0482e
SH256 hash:
5583a488e835e585c4f531be493df47e6e12f4c5fde8edb0a747f9c2e8b3e0a1
MD5 hash:
8926513a14e118841b8342442f3bbe92
SHA1 hash:
b38b8aad0b4d3fa96bfd214aea9ac9e451cf5f8b
Link:
https://www.unpac.me/results/5a21a625-6994-4e8a-ae3d-62c311155398/
SH256 hash:
f8dbc6077f6b01c6eec334061d687ff1b291a2aa5513cf1e0b5bde4a8dbc5588
MD5 hash:
15aab611795bcbf2758052944013be1a
SHA1 hash:
772a1002b111e117cf3b1e9f0cabda4894777399
Link:
https://www.unpac.me/results/5a21a625-6994-4e8a-ae3d-62c311155398/
SH256 hash:
04346b65f015d828402d306c0f9d15f4b5437cf45b67b5638e7e58a527db5e9e
MD5 hash:
ad0917027bda8997a6e18a0d0b7a2ab1
SHA1 hash:
475a0adceafff8b3ae39888724ec26e6c6dbb32d
Link:
https://www.unpac.me/results/5a21a625-6994-4e8a-ae3d-62c311155398/
SH256 hash:
9c45ec5465bf81a336d5b90fe721c0c7bd348ece97b89662bf399dea81850041
MD5 hash:
9e139961ce4f71960a0a8648b440093e
SHA1 hash:
164471f05971248e973599304a0744c2bda6c140
Link:
https://www.unpac.me/results/5a21a625-6994-4e8a-ae3d-62c311155398/
SH256 hash:
0b45ded9f991e23530a7b6cf0c5899e373aeff8d6cda9dcb2ed6d5c18d75cb3d
MD5 hash:
3ab4fc80a90fcdb31b76062f31db22b2
SHA1 hash:
e6eb609b2b457d128b620bf2286e53e59962351c
Detections:
FormBook
Create hunting rule
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
FormBook
Create hunting rule
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
FormBook
Create hunting rule
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
FormBook
Create hunting rule
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
FormBook
Create hunting rule
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
Link:
https://www.unpac.me/results/5a21a625-6994-4e8a-ae3d-62c311155398/
Parent samples :
b1dac250b790090d75044bf149fb5e5372fed13d4c44999e4653a159d96c63b0
8df5b45068f0db6e7c557e62625444e14e5611f36682453ce80210cd1ec82820
136c006862c2262205fa40f61daaf18a5d4209bebc0236d7c8743ec554d0482e
SH256 hash:
5583a488e835e585c4f531be493df47e6e12f4c5fde8edb0a747f9c2e8b3e0a1
MD5 hash:
8926513a14e118841b8342442f3bbe92
SHA1 hash:
b38b8aad0b4d3fa96bfd214aea9ac9e451cf5f8b
Link:
https://www.unpac.me/results/5a21a625-6994-4e8a-ae3d-62c311155398/
SH256 hash:
f8dbc6077f6b01c6eec334061d687ff1b291a2aa5513cf1e0b5bde4a8dbc5588
MD5 hash:
15aab611795bcbf2758052944013be1a
SHA1 hash:
772a1002b111e117cf3b1e9f0cabda4894777399
Link:
https://www.unpac.me/results/5a21a625-6994-4e8a-ae3d-62c311155398/
SH256 hash:
04346b65f015d828402d306c0f9d15f4b5437cf45b67b5638e7e58a527db5e9e
MD5 hash:
ad0917027bda8997a6e18a0d0b7a2ab1
SHA1 hash:
475a0adceafff8b3ae39888724ec26e6c6dbb32d
Link:
https://www.unpac.me/results/5a21a625-6994-4e8a-ae3d-62c311155398/
SH256 hash:
9c45ec5465bf81a336d5b90fe721c0c7bd348ece97b89662bf399dea81850041
MD5 hash:
9e139961ce4f71960a0a8648b440093e
SHA1 hash:
164471f05971248e973599304a0744c2bda6c140
Link:
https://www.unpac.me/results/5a21a625-6994-4e8a-ae3d-62c311155398/
SH256 hash:
8df5b45068f0db6e7c557e62625444e14e5611f36682453ce80210cd1ec82820
MD5 hash:
9b83e74569158b67e894070b708188ae
SHA1 hash:
815da5fef9414c67b0d8bbe29e0ba54d6b21aa7b
Link:
https://www.unpac.me/results/5a21a625-6994-4e8a-ae3d-62c311155398/
Malware family:
FormBook
Create hunting rule
Verdict:
Malicious
Link:
https://www.vmray.com/analyses/_mb/8df5b45068f0/report/overview.html
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/8df5b45068f0db6e7c557e62625444e14e5611f36682453ce80210cd1ec82820

YARA Signatures

MalwareBazaar uses YARA rules from several public and non-public repositories, such as YARAhub and Malpedia. Those are being matched against malware samples uploaded to MalwareBazaar as well as against any suspicious process dumps they may create. Please note that only results from TLP:CLEAR rules are being displayed.

Rule name:pe_imphash
Create hunting rule
Rule name:Skystars_Malware_Imphash
Create hunting rule
Author:Skystars LightDefender
Description:imphash

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Cape
Cape
https://www.capesandbox.com/analysis/407436/

Comments