MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 9a832b57bf9d30303d52abddba0a6796ee81f3c1fb224fcf27aa31cec927b252. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Formbook


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 9a832b57bf9d30303d52abddba0a6796ee81f3c1fb224fcf27aa31cec927b252
SHA3-384 hash: 673f6381ffa290b6d9a7e2d45552fdfaf8c1f75c9988ddfb262f13dacad339c7f41b5f8f3dde170f55886f05c890df44
SHA1 hash: d644d169bb647be43a2f00dff5b96f0c248532c8
MD5 hash: a43978d34ee1261a3e25114dadb3a458
humanhash: five-hamper-alpha-london
File name:ShippingDoc12-08.ace
Download: download sample
Signature Formbook
Create hunting rule
File size:747'880 bytes
First seen:2020-12-09 13:45:40 UTC
Last seen:2020-12-09 23:56:37 UTC
File type: ace
MIME type:application/octet-stream
ssdeep 12288:3+T1Vz7yuUwcaYMOLuk/sXNqTqQVqtEQgW9rB7fb4Qyrgq+W7JNWI+WCcgqfSK+b:uT1Vz7ylaWukEXNLQVqtEQ5t7zmP+2bq
TLSH 1BF423AC9F8E6A50DE2EEB6B3EA94C9754AA75470F062BFC2950951D1807D02FC3870D
Reporter GovCERT_CH

Intelligence

File Origin
# of uploads :
4
# of downloads :
98
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.25738.AceHeur.Exe.UNOFFICIAL
Create hunting rule

Sanesecurity.Malware.25166.AceHeur.Exe.UNOFFICIAL
Create hunting rule

SecuriteInfo.com.Suspicious-ACE-exe.UNOFFICIAL
Create hunting rule

Result
Verdict:
MALICIOUS
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/9a832b57bf9d30303d52abddba0a6796ee81f3c1fb224fcf27aa31cec927b252/
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2020-12-08 17:57:36 UTC
AV detection:
18 of 28 (64.29%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Suspicious File
Score:
0.55
Link:
https://yomi.yoroi.company/submissions/9a832b57bf9d30303d52abddba0a6796ee81f3c1fb224fcf27aa31cec927b252

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Formbook

ace 9a832b57bf9d30303d52abddba0a6796ee81f3c1fb224fcf27aa31cec927b252

(this sample)

Formbook

Executable exe 84cb3c9404d520f05f868b550697de2803c587b02fc156764c953a12a227e4d7

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 84cb3c9404d520f05f868b550697de2803c587b02fc156764c953a12a227e4d7
  
Dropping
MD5 d0f467ab1dd48feaa43199f2bd3f2007

Comments