MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 b9e3e96b3a6a03b989d50790b41a5e7bccbfed13c1501431483f831dccc2472d. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Formbook


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: b9e3e96b3a6a03b989d50790b41a5e7bccbfed13c1501431483f831dccc2472d
SHA3-384 hash: eaf43a5714d0784d0e5d1ba26c3c49e98ba5d1bbbfd4fdd21ebf9723a7a7ce1e14cade7a9dd823cbdb076dc5261308d6
SHA1 hash: 2e9f0253df9cc4bd5e3111637aef2760a9e17fef
MD5 hash: 6fb03e7558f6346bccdd57377d7b0e8d
humanhash: delta-equal-echo-mississippi
File name:Powiadomienie o przelewie.img
Download: download sample
Signature Formbook
Create hunting rule
File size:1'507'328 bytes
First seen:2022-02-01 12:05:26 UTC
Last seen:2022-02-01 12:20:14 UTC
File type: img
MIME type:application/x-iso9660-image
ssdeep 24576:YikJNkPZc3MOTR29TKt7RLTTKYvKjRdxT+SN:YinilTTVvkxd
TLSH T100658E13F2908436D9321AB48D4B87946A1DBE213E1CF9863BD87E4D0F76391393AE57
Reporter Anonymous
Tags:img udf

Intelligence

File Origin
# of uploads :
2
# of downloads :
179
Origin country :
n/a
Vendor Threat Intelligence
Verdict:
Malicious
Threat level:
  10/10
Confidence:
100%
Tags:
control.exe keylogger
Link:
https://www.filescan.io/uploads/61f9222e18d1bfdde4e67e1f/reports/a9df73a0-8bff-4ffc-b0d4-f628e9c3f99f/overview
Result
Verdict:
SUSPICIOUS
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/b9e3e96b3a6a03b989d50790b41a5e7bccbfed13c1501431483f831dccc2472d/
Threat name:
Win32.Spyware.Noon
Create hunting rule
Status:
Malicious
First seen:
2022-02-01 12:06:13 UTC
File Type:
Binary (Archive)
Extracted files:
103
AV detection:
8 of 43 (18.60%)
Threat level:
  2/5
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/b9e3e96b3a6a03b989d50790b41a5e7bccbfed13c1501431483f831dccc2472d

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Formbook

img b9e3e96b3a6a03b989d50790b41a5e7bccbfed13c1501431483f831dccc2472d

(this sample)

Formbook

Executable exe 28562d1e97597dbe302d550277e91bd4aa6869bd3d356668bc7c48b2b6eaa3d1

  
Dropping
MD5 c6be5c921983d12d647d75790e8efdfd
  
Dropping
SHA256 28562d1e97597dbe302d550277e91bd4aa6869bd3d356668bc7c48b2b6eaa3d1
  
Dropping
Formbook
  
Delivery method
Distributed via e-mail attachment

Comments