MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 9525753dc00dddf9b20f287c37281f3fc685abd17866acf1cc4c9e33980efb65. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


FormBook


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 9525753dc00dddf9b20f287c37281f3fc685abd17866acf1cc4c9e33980efb65
SHA3-384 hash: 773c3b2a4bc05dd53512146bc6b04fa735fdf31505e57a5272fd36a61e4ac6d2e27e81a14e9ca20bcf62b9ee3aeaf4ae
SHA1 hash: e3e50e79ea68dfdd9f0f08846d64248f70f95eb6
MD5 hash: 258395744791816426022066c14d0531
humanhash: bakerloo-summer-lion-charlie
File name:Lc Advice.img
Download: download sample
Signature FormBook
Create hunting rule
File size:342'016 bytes
First seen:2020-06-23 06:42:37 UTC
Last seen:Never
File type: img
MIME type:application/x-iso9660-image
ssdeep 6144:uBqMgAoEHpfbOchpgkatkbE4Yf/VDHXn9x:kqsdHNRyCa99x
TLSH B874D003B8DECCF2C01E55BB9969AA439D2FF870C175292371F8576C9BF0280693A756
Reporter abuse_ch
Tags:FormBook img


Avatar
abuse_ch
Malspam distributing FormBook:

From: Karim Kaboreh <info@webtechserv.live>
Reply-To: abamfayed@gmail.com
Subject: Fwd: Lc Advice
Attachment: Lc Advice.img (contains "Lc Advice.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
73
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
PUA.Win.Downloader.Aiis-6803892-0
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/9525753dc00dddf9b20f287c37281f3fc685abd17866acf1cc4c9e33980efb65/
Threat name:
Win32.Spyware.Noon
Create hunting rule
Status:
Malicious
First seen:
2020-06-23 06:44:04 UTC
AV detection:
17 of 29 (58.62%)
Threat level:
  2/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=susxkpoabxo7tmqpfb6doka7h7dilk6rpbtkz4omjspdhgao7nsq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

FormBook

img 9525753dc00dddf9b20f287c37281f3fc685abd17866acf1cc4c9e33980efb65

(this sample)

FormBook

Executable exe fae05bd0a5f10ab3af4cd409d476e8858611e9eb5865d95828f8bca305e54b32

  
Dropping
MD5 f417019a58819094264b9687afaafcf4
  
Dropping
FormBook
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 fae05bd0a5f10ab3af4cd409d476e8858611e9eb5865d95828f8bca305e54b32

Comments