MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 ba59839a9eb0b905e936f915f15a83c14a1523f3cb726508a774d21d74997c35. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


FormBook


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: ba59839a9eb0b905e936f915f15a83c14a1523f3cb726508a774d21d74997c35
SHA3-384 hash: 9c1efb44a51e23d7ace07c0e3696cdd2b85166dc9765d700089cc049bb3500605729aad9afe87fe07e1571c080df00e5
SHA1 hash: bd3ab2f6ae0cd3f0a51133930a40a7f0fe242dd9
MD5 hash: f7f2480473d44a70cd0d63890e7e3fe9
humanhash: item-ten-hawaii-red
File name:uzoraka proizvoda.zip
Download: download sample
Signature FormBook
Create hunting rule
File size:325'284 bytes
First seen:2020-06-23 14:23:06 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 6144:BDNU3u7gHtMAZdy8CAnjMkyKWoCcU5XJS377iLDO1ck3AY5xmhpwNndNC:BDebWOrCAIkyKWoA3ifUEQ+x6pwNdI
TLSH 24642349D076E572F94A71CBA1A297085711E626CB32371B7E0F2807D1FDD32F2E6429
Reporter abuse_ch
Tags:FormBook geo HRV zip


Avatar
abuse_ch
Malspam distributing FormBook:

From: tomo.hendija@koncar-mk.hr
Subject: Re: Re Re: Re Re: Re Re: Re Dokumentacija za izradu kupola P003215 SK:230-233
Attachment: uzoraka proizvoda.zip (contains "uzoraka proizvoda.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
81
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.BScope.Trojan.Downloader.18485.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/ba59839a9eb0b905e936f915f15a83c14a1523f3cb726508a774d21d74997c35/
Threat name:
Win32.Infostealer.Fareit
Create hunting rule
Status:
Malicious
First seen:
2020-06-23 14:25:04 UTC
AV detection:
27 of 48 (56.25%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=xjmyhgu6wc4ql2jw7ek7cwudyffbki7tznzgkcfhotjb25ezpq2q._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

FormBook

zip ba59839a9eb0b905e936f915f15a83c14a1523f3cb726508a774d21d74997c35

(this sample)

FormBook

Executable exe 1a6ed8b38376300f4f5a104c20726e2d90eb9e1bc26055596617f3ee2a28a350

  
Dropping
MD5 6789fab72271901347517989738c0400
  
Dropping
FormBook
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 1a6ed8b38376300f4f5a104c20726e2d90eb9e1bc26055596617f3ee2a28a350

Comments