MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 909bd01c150819db1aeb29401188658ea3cd5152c7550777fa418c4778a114c7. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Formbook


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 909bd01c150819db1aeb29401188658ea3cd5152c7550777fa418c4778a114c7
SHA3-384 hash: 1e7dbe6bb5143c02ee4737b51d231ab2eb1f7da31a645b29a51364569bef5e811a9946937c346d18a22bb301d68c3486
SHA1 hash: 977bfc66feb62c3246597f99a703e8fef3e92f39
MD5 hash: 242c8e46b3b4fc441024d11d07615733
humanhash: blue-vegan-mobile-lion
File name:NEW ORDER NO8765432.Z
Download: download sample
Signature Formbook
Create hunting rule
File size:216'432 bytes
First seen:2020-08-12 07:11:38 UTC
Last seen:Never
File type: z
MIME type:application/x-rar
ssdeep 6144:a2efS5KBL7akyeKJpUZwyfkZ7aNxjp92SDHqO4e:cf4KBLuxJqwbZ7Ed9bB
TLSH EE24238F84F603FB02C5CA70CE4CDFBC42D2600714D815B666A9A74F5B6171A29A9B7B
Reporter cocaman
Tags:FormBook z


Avatar
cocaman
Malicious email
From: LEE<info@patodiagroup.com>
Received: from patodiagroup.com (unknown [212.83.46.93])
Date: 3 Aug 2020 02:37:29 -0700
Subject: NEW PO
Attachment: NEW ORDER NO8765432.Z

Intelligence

File Origin
# of uploads :
1
# of downloads :
63
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/909bd01c150819db1aeb29401188658ea3cd5152c7550777fa418c4778a114c7/
Threat name:
Win32.Trojan.Skeeyah
Create hunting rule
Status:
Malicious
First seen:
2020-08-03 20:17:06 UTC
File Type:
Binary (Archive)
Extracted files:
6
AV detection:
18 of 29 (62.07%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=scn5ahavbam5wgxlffabdcdfr2r42uksy5kqo572iggeo6fbctdq._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/909bd01c150819db1aeb29401188658ea3cd5152c7550777fa418c4778a114c7

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Formbook

z 909bd01c150819db1aeb29401188658ea3cd5152c7550777fa418c4778a114c7

(this sample)

Formbook

Executable exe 226d6cd50322ceae809181841a430f14ec5499f4fdad7f51e622c772c80d7351

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 226d6cd50322ceae809181841a430f14ec5499f4fdad7f51e622c772c80d7351
  
Dropping
Formbook

Comments