General
-
Target
1358ae1fa6701b06f8f168c359cb62d6.exe
-
Size
837KB
-
Sample
210112-1splpqq9sx
-
MD5
1358ae1fa6701b06f8f168c359cb62d6
-
SHA1
a611886f3335a0be5bd83226833d67e9cddf5b6b
-
SHA256
dca4c9a7846a3ebb066c08583388adeb4b05e464f20abd10409ccf47164d8635
-
SHA512
a5738a23bbe3187afe2040b7aa59da430641684c8476213845ff235efd419ba82eb0ea9b4f1c592130338a20a90c2a23043f56e727415bb22a1281e87b813634
Malware Config
Extracted
formbook
http://www.classifoods.com/oean/
keboate.club
whitehatiq.com
loimtech.com
icaroagencia.com
snigglez.com
noreservationsxpress.com
villacascabel.com
5037adairway.com
growingequity.fund
stafffully.com
bingent.info
tmssaleguarantee.com
neonatalfeedrates.com
george-beauty.com
oraghallaighjourney.net
zunutrition.com
sylkysmooveentertainment.com
ddmns6tzey2d.com
dvcstay.com
304shaughnessygreen.info
Targets
-
-
Target
1358ae1fa6701b06f8f168c359cb62d6.exe
-
Size
837KB
-
MD5
1358ae1fa6701b06f8f168c359cb62d6
-
SHA1
a611886f3335a0be5bd83226833d67e9cddf5b6b
-
SHA256
dca4c9a7846a3ebb066c08583388adeb4b05e464f20abd10409ccf47164d8635
-
SHA512
a5738a23bbe3187afe2040b7aa59da430641684c8476213845ff235efd419ba82eb0ea9b4f1c592130338a20a90c2a23043f56e727415bb22a1281e87b813634
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Xloader
Xloader is a rebranded version of Formbook malware.
-
Xloader Payload
-
Suspicious use of SetThreadContext
-