General

  • Target
    f5ad24e35bd51618b78ea38420ee381b.exe
  • Size 870KB
  • Sample201105-abwndnc7de
  • SHA256 d98beb65dff0d8e1963f1cc7df755e273bbe45c8143b556bc9a84bcfd0cdea78
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • formbook

C2
  • http://www.smart-linked.info/oj6t/

Decoy
  • haliluyar.xyz

  • latinxfunded.com

  • techaik.com

  • rickduttimmigration.info

  • chevrolettrucksatlanta.com

  • psm-gen.com

  • wwwkanzhun.com

  • stevieszerlip.com

  • jgxdpkm.com

  • elmaestrofoods.com

  • jrnybox.com

  • egyptianstartours.com

  • villadecorazones.com

  • constanzard.com

  • openfitxbstretch.com

  • urbanreachnetwork.com

  • kevinslater.com

  • bakedoverapparel.com

  • littlehitz.com

  • dubojx.com

Targets

    • Target
      f5ad24e35bd51618b78ea38420ee381b.exe
    • Size 870KB
    • SHA256 d98beb65dff0d8e1963f1cc7df755e273bbe45c8143b556bc9a84bcfd0cdea78
    • MD5 SHA1 SHA512

MITRE ATT&CK Enterprise v6

Tasks