MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 ae871b2474f42d02b46356d04621eecb7a66c81141fc015bdc8d7e3d98f47481. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


FormBook


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: ae871b2474f42d02b46356d04621eecb7a66c81141fc015bdc8d7e3d98f47481
SHA3-384 hash: ab7c58eb558072f4fc57a1c2576bffc66997357174879dae30691c871d8548e863f764f259f2a61dbf000f96b37c7fc5
SHA1 hash: e5c5b3e804ca30b010dd3497550d8605b5f06925
MD5 hash: ddeb77f3877d1311ca2c3abeb4721d67
humanhash: river-beer-carpet-minnesota
File name:ae871b2474f42d02b46356d04621eecb7a66c81141fc015bdc8d7e3d98f47481
Download: download sample
Signature FormBook
Create hunting rule
File size:172'096 bytes
First seen:2020-03-23 17:21:26 UTC
Last seen:2020-03-23 17:28:00 UTC
File type:unknown
MIME type:application/octet-stream
ssdeep 3072:DliCYfJmGBG/xNcpNgXcJXYn1pz7OcKLsMe51J23Rl+Mk7K7ZUowj:DliCsJmeGnDMYLosnWEMw8w
TLSH DBF3128DA7BF17106401D84241E507B676FFACF2C4A9E038BD2716D39B04BF3A652AE4
Reporter Marco_Ramilli

Intelligence

File Origin
# of uploads :
2
# of downloads :
71
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Trojan.GenericKD.42884995.11064.32161.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
Win32.Trojan.Generic
Create hunting rule
Status:
Malicious
First seen:
2020-03-23 17:47:25 UTC
AV detection:
3 of 31 (9.68%)
Threat level:
  2/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

FormBook

unknown ae871b2474f42d02b46356d04621eecb7a66c81141fc015bdc8d7e3d98f47481

(this sample)

FormBook

Executable exe 7caa60665e3824a3571669e2f6efe2757e5521af83e28022e5079074e042d52f

  
URLhaus
https://urlhaus.abuse.ch/url/328902/
  
Dropping
SHA256 7caa60665e3824a3571669e2f6efe2757e5521af83e28022e5079074e042d52f
  
Dropping
SHA256 7caa60665e3824a3571669e2f6efe2757e5521af83e28022e5079074e042d52f
  
Dropping
MD5 d80a33b4661f9388a9518e20a7cae93a
  
Delivery method
Distributed via web download

Comments