MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 c29056fec9d6cbfd1a40ea84e5321bc87e2594810f8978f0b05588436c5f774b. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Formbook


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: c29056fec9d6cbfd1a40ea84e5321bc87e2594810f8978f0b05588436c5f774b
SHA3-384 hash: 508d09a71ed13169b2bd4928ce39d8cd834273707059f7e3a014fbec94a048d0eb06a5e4a77557491332ca0173dc7e0c
SHA1 hash: 3f558311338fe5844bf90841cc5c5639a525af7e
MD5 hash: 37629592f6476f120be4aea6325f3d35
humanhash: stairway-december-equal-carolina
File name:PaymentAdvice.cab
Download: download sample
Signature Formbook
Create hunting rule
File size:242'923 bytes
First seen:2021-04-08 08:02:01 UTC
Last seen:2021-04-08 09:10:38 UTC
File type: cab
MIME type:application/vnd.ms-cab-compressed
ssdeep 6144:YfdVS2W+zaDKCnOpyvW85Lbmq/y92dcyQfqj:iC323pyvZ5HRGLyQfqj
TLSH 9534232681A501AAE19CC37BCFAE5F1F6117864206872FE2D0A7FD3D07B7AC02560C6D
Reporter lowmal3
Tags:FormBook

Intelligence

File Origin
# of uploads :
3
# of downloads :
95
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Variant.Jaik.45029.27196.9189.UNOFFICIAL
Create hunting rule

Result
Verdict:
MALICIOUS
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/c29056fec9d6cbfd1a40ea84e5321bc87e2594810f8978f0b05588436c5f774b/
Threat name:
Binary.Trojan.Jaik
Create hunting rule
Status:
Malicious
First seen:
2021-04-08 08:02:06 UTC
AV detection:
6 of 48 (12.50%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=ykifn7wj23f72gsa5kcokmq3zb7clfebb6exr4fqkweeg3c7o5fq._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Suspicious File
Score:
0.67
Link:
https://yomi.yoroi.company/submissions/c29056fec9d6cbfd1a40ea84e5321bc87e2594810f8978f0b05588436c5f774b

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Formbook

cab c29056fec9d6cbfd1a40ea84e5321bc87e2594810f8978f0b05588436c5f774b

(this sample)

Formbook

Executable exe 397fd95899f186c1385818c6b996f4cb410e266a84b2c134104d01675a822e27

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 397fd95899f186c1385818c6b996f4cb410e266a84b2c134104d01675a822e27
  
Dropping
MD5 91937d3f9e93657c18129ff519b7f340

Comments