MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 dc1ad1b89ac56f0d92b0553839639dc1b85c4a9f7e333dc92f2e0abb12e1ebd3. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Formbook


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: dc1ad1b89ac56f0d92b0553839639dc1b85c4a9f7e333dc92f2e0abb12e1ebd3
SHA3-384 hash: 2946f8580e114be24f99707af94794351c09aad7b56673e45350172b40ada79a4a3cfdb0557d5389ace9aba5e5318e6d
SHA1 hash: 53857d559d5f81fcee93ccbaba0d45c54ebfcaec
MD5 hash: 61dc5c2e2f5146a6e60d4de4b95b1d16
humanhash: montana-floor-mexico-lithium
File name:Letter of Demand and Unpaid invoice.pdf.gz
Download: download sample
Signature Formbook
Create hunting rule
File size:541'268 bytes
First seen:2020-10-22 07:37:04 UTC
Last seen:Never
File type: gz
MIME type:application/gzip
ssdeep 12288:GIp6Qcd6dYCiVcqVdS5QviXHptwWy43QCLhcGVZaFGBU:I6dqVN6wKZyKBhVZ3u
TLSH FFB4236D5691416EE7CDA8ADF806D168F27714AEB7BA40B110841BCD0F0E97C4AFCF18
Reporter abuse_ch
Tags:FormBook gz


Avatar
abuse_ch
Malspam distributing Formbook:

From: collections@debtbusters.co.za
Subject: Letter of Demand // Overdue Account
Attachment: Letter of Demand and Unpaid invoice.pdf.gz (contains "Letter of Demand and Unpaid invoice.pdf.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
73
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/dc1ad1b89ac56f0d92b0553839639dc1b85c4a9f7e333dc92f2e0abb12e1ebd3/
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2020-10-22 04:19:37 UTC
AV detection:
22 of 29 (75.86%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=3qnndoe2yvxq3evqku4dsy45yg4fysu7pyzt3sjpfyflwexb5pjq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Formbook

gz dc1ad1b89ac56f0d92b0553839639dc1b85c4a9f7e333dc92f2e0abb12e1ebd3

(this sample)

Formbook

Executable exe 7843242690547cf0b4ebea118783c903b99c3a211f1775db3cf24b09fbe2454a

  
Dropping
MD5 2e15b0340269d155525dbdf2c3d4ea16
  
Dropping
Formbook
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 7843242690547cf0b4ebea118783c903b99c3a211f1775db3cf24b09fbe2454a

Comments