MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 eb08b38ca3e583a48caa99a1f48b707b91dc35824e5368fddf78042927e36cdc. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Formbook


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: eb08b38ca3e583a48caa99a1f48b707b91dc35824e5368fddf78042927e36cdc
SHA3-384 hash: 49de44bee56de24010f2d383b3ff8bd01048d00649651f33f495f71bd96c66a059302da83fb2cae910b4a45053d0cef8
SHA1 hash: 8ddde4b2d04c5dd4d5a0bfa5e4982c6798cb5ea8
MD5 hash: 8c8eb4dd56e83e2e8f6d886b1827ddc8
humanhash: rugby-jig-king-zebra
File name:MTP-성진기공_pdf.gz
Download: download sample
Signature Formbook
Create hunting rule
File size:419'449 bytes
First seen:2020-10-20 08:35:14 UTC
Last seen:Never
File type: gz
MIME type:application/x-rar
ssdeep 12288:vtPsOiYk27UPFFR2IR59qi0z3vqQltAGaQU:vtPsnngUtnTUFdl2GaH
TLSH 6C94235749B0ACE4B329CD0931C72B441CF0034232AAE54E291DDABB9CD653BE49EF6D
Reporter abuse_ch
Tags:geo gz KOR


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: mail-smail-vm46.hanmail.net
Sending IP: 203.133.180.234
From: UTITECH <kwakts@hanmail.net>
Subject: 유티아이테크-발주서 송부의건
Attachment: MTP-성진기공_pdf.gz (contains "MTP-성진기공.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
60
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/eb08b38ca3e583a48caa99a1f48b707b91dc35824e5368fddf78042927e36cdc/
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=5melhdfd4wb2jdfktgq7jc3qpoi5ynmcjzjwr7o7paccsj7dntoa._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/eb08b38ca3e583a48caa99a1f48b707b91dc35824e5368fddf78042927e36cdc

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Formbook

gz eb08b38ca3e583a48caa99a1f48b707b91dc35824e5368fddf78042927e36cdc

(this sample)

Formbook

Executable exe 162fdb36fbbaff1589c43a9d4ee712e15e8e123a562e569fcee28db30b756396

  
Dropping
MD5 51afc3df2bf79ca26430f80604c0640f
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 162fdb36fbbaff1589c43a9d4ee712e15e8e123a562e569fcee28db30b756396

Comments