MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 ba1d6cb7665152901a41da941c841d37134a9ac0be6d6a160baf3a09eb295bc2. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Formbook


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: ba1d6cb7665152901a41da941c841d37134a9ac0be6d6a160baf3a09eb295bc2
SHA3-384 hash: ec62581f27dfcc8b71a41750e86f381f2871b93cd9a5920cbf31b6d3b50baf89231cd2278043e904ee11ccbe0d36049a
SHA1 hash: a57730d1c9b95726eaf8e7dfead8e8b4f9de10aa
MD5 hash: a02a4afc748b779bf44d8a3224526c19
humanhash: michigan-oregon-paris-social
File name:引用我們的報價單.img
Download: download sample
Signature Formbook
Create hunting rule
File size:1'245'184 bytes
First seen:2020-10-15 12:55:10 UTC
Last seen:Never
File type: img
MIME type:application/x-iso9660-image
ssdeep 6144:PuwemNlKUl0sev6H5+Q0JUwJsSyR0ahtIQl/FltCOIKYa5mh5zhmCHfTqs8SYq4:WTbHDdiSG0ahtIQ6KYa5mf01sC
TLSH 4C45AD727D92D97FCA6A0731146584CDFAB612C63F60870D725E4B8CCF11B6BA743286
Reporter abuse_ch
Tags:FormBook img


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: msa-smtp4.hinet.net
Sending IP: 168.95.6.54
From: 昱來企業股份有限公司 <yuinlai@ms27.hinet.net>
Subject: RE：引用我們的報價單
Attachment: 引用我們的報價單.img (contains "Quotation.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
87
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/ba1d6cb7665152901a41da941c841d37134a9ac0be6d6a160baf3a09eb295bc2/
Threat name:
ByteCode-MSIL.Trojan.Generic
Create hunting rule
Status:
Suspicious
First seen:
2020-10-15 10:15:51 UTC
AV detection:
9 of 48 (18.75%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/ba1d6cb7665152901a41da941c841d37134a9ac0be6d6a160baf3a09eb295bc2

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Formbook

img ba1d6cb7665152901a41da941c841d37134a9ac0be6d6a160baf3a09eb295bc2

(this sample)

Formbook

Executable exe 99c4f75948b26af511bfa055db8d18567a3d662107e35e91102b5576f02acb84

  
Dropping
MD5 6137807b29f7176e5cec7b7c3575e86f
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 99c4f75948b26af511bfa055db8d18567a3d662107e35e91102b5576f02acb84

Comments