MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 921726237fd1bede19eb2ea67c8b5c6a7be69447d7affe2717aed0ae7f7837b2. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



FormBook


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments

SHA256 hash: 921726237fd1bede19eb2ea67c8b5c6a7be69447d7affe2717aed0ae7f7837b2
SHA3-384 hash: b51a0f9ce58c781081f23f0b516dc077d217a3994b3591731b96c37d7485797fb7afe592171a87982eed0aea42bc5581
SHA1 hash: 815dbf1b5a982b86c8ba54e8849add7c864b4c91
MD5 hash: b2bff2fe8a7838638db161f8fb8e6d31
humanhash: foxtrot-robin-violet-finch
File name:DHL.xslm.img
Download: download sample
Signature FormBook
File size:1'292'288 bytes
First seen:2021-04-29 08:13:28 UTC
Last seen:2021-04-29 10:50:46 UTC
File type: img
MIME type:application/x-iso9660-image
ssdeep 24576:6o/CR1x1bzaV635VOk+618+MNPUb2l0ixHH2KTeghL9x:1qR13RL+lUe0ixHlThhL7
TLSH 0955014569FC247FD28736385F548A73A68B6EAC7A2C48573B9CBD122732432E31C6D1
Reporter fabjer
Tags:FormBook img

Intelligence


File Origin
# of uploads :
2
# of downloads :
103
Origin country :
n/a
Vendor Threat Intelligence
Result
Verdict:
MALICIOUS
Threat name:
Win32.Trojan.Wacatac
Status:
Malicious
First seen:
2021-04-29 02:36:07 UTC
AV detection:
4 of 47 (8.51%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

FormBook

img 921726237fd1bede19eb2ea67c8b5c6a7be69447d7affe2717aed0ae7f7837b2

(this sample)

  
Delivery method
Distributed via e-mail attachment

Comments