Overview

overview

10

Static

static

10

03d0a5a1b4...ad.exe

windows7_x64

1

03d0a5a1b4...ad.exe

windows10_x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    03d0a5a1b45404432b8b2e869c168fad
  • Size 181KB
  • Sample201025-tpmsfbmben
  • SHA256 5248643a130c832416245ea6b33ab3724a81c4e4a36b2ea424dd1a5fc1dd7ac2
  • MD5 SHA1 SHA512
Score
10/10
formbookrat

Malware Config

Extracted

Family

  • formbook

C2

  • http://www.nhequxrpt.icu/msl/

Decoy

  • demonslayer-merch.com

  • plantation-revival.com

  • jigsawbb.com

  • pappy-b.com

  • trackmefitcom.com

  • chestnutstreetcondo.com

  • highviewwhillsmonsey.com

  • guitars4vetsonline.com

  • dezinerslab.com

  • medical-devices.info

  • comoditahandyshop.com

  • remotepreneed.com

  • jsmuaana.net

  • pinchinthorpehall.com

  • hodu61.net

  • sacredspaceproducts.com

  • slcromt.xyz

  • revistaamore.net

  • stylo-mart.com

  • wine-hello.com

Targets

    • Target
      03d0a5a1b45404432b8b2e869c168fad
    • Size 181KB
    • SHA256 5248643a130c832416245ea6b33ab3724a81c4e4a36b2ea424dd1a5fc1dd7ac2
    • MD5 SHA1 SHA512
    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks