General

  • Target
    5c8a054cefa2c826ca3fc7bbd54e58ab.exe
  • Size 328KB
  • Sample201109-8dmlc5d89x
  • SHA256 62629c366ee55b4376c03a63e8f94e121a3ff7cbecfcf22d0158515446a9457e
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • formbook

C2
  • http://www.regulars5.com/ms20/

Decoy
  • ginayjasive.net

  • unique-bruce.com

  • marcaschingonas.net

  • artandartistonline.com

  • creditcubeaa.com

  • jnlunwen.com

  • adriangallop.com

  • gardenmebydjnui.com

  • dakdekker-utrecht.com

  • padmatrades.com

  • esseconsultingllc.com

  • heisenlintec.com

  • 110431.info

  • posseco.com

  • team10hoodies.site

  • sciencewtour.com

  • paigeslife.com

  • idea-asesoria.com

  • crypotland.com

  • 862575zk.info

Targets

    • Target
      5c8a054cefa2c826ca3fc7bbd54e58ab.exe
    • Size 328KB
    • SHA256 62629c366ee55b4376c03a63e8f94e121a3ff7cbecfcf22d0158515446a9457e
    • MD5 SHA1 SHA512

MITRE ATT&CK Matrix

Tasks