MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 b8910c59ada379ca8a4e06f1bb9e06bcccdda4a8124e92061b8ea6345ba2984c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Formbook


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: b8910c59ada379ca8a4e06f1bb9e06bcccdda4a8124e92061b8ea6345ba2984c
SHA3-384 hash: 0804a45ae5e15ebbb8fd13893b8d4a5be81ce42105603c80589868905448ce8ec34051285364669f165ff084e74ce68a
SHA1 hash: 6f43609cf532e6946a73526c5eadf49d0f97d5ad
MD5 hash: 52ee7ee8b2ba742c71bee0feab003348
humanhash: september-paris-stream-colorado
File name:New Order Inquiry.rar
Download: download sample
Signature Formbook
Create hunting rule
File size:248'558 bytes
First seen:2021-01-06 16:10:57 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 6144:4ibyO8BLvcP6iGFWhdINp/dwgEV1NWH87Hft0xZa2d9NZe:4in8BTWzIj2gyl+62Lze
TLSH B13422E0EE718A3AADF0588D90DFB56D5B7B433C365C71D2B06CC9BD964982D29A0037
Reporter abuse_ch
Tags:FormBook rar


Avatar
abuse_ch
Malspam distributing Formbook:

HELO: alnassar.com.sa
Sending IP: 162.244.93.110
From: Márcia <enquiries@brainfarma.ind.br>
Reply-To: antoniomarcia@brainfarma.ind.br
Subject: New Order Inquiry
Attachment: New Order Inquiry.rar (contains "inv.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
203
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Heur.17869.17204.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/b8910c59ada379ca8a4e06f1bb9e06bcccdda4a8124e92061b8ea6345ba2984c/
Threat name:
Win32.Trojan.Generic
Create hunting rule
Status:
Suspicious
First seen:
2021-01-06 16:11:07 UTC
AV detection:
6 of 28 (21.43%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=xciqywnnun44vcsoa3y3xhqgxtgn3jficjhjebq3r2tdiw5ctbga._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/b8910c59ada379ca8a4e06f1bb9e06bcccdda4a8124e92061b8ea6345ba2984c

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Formbook

rar b8910c59ada379ca8a4e06f1bb9e06bcccdda4a8124e92061b8ea6345ba2984c

(this sample)

Formbook

Executable exe 73d3092b1f9a4b51d169f0757e120c8bb1e7d0a650a83dc00ea0dac2204df55a

  
Dropping
MD5 ac36d5579c704d83e721a9a63975efcf
  
Dropping
Formbook
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 73d3092b1f9a4b51d169f0757e120c8bb1e7d0a650a83dc00ea0dac2204df55a

Comments