General
-
Target
Consignment Document PL&BL Draft.exe
-
Size
318KB
-
Sample
210113-z24wbz1a1a
-
MD5
ef20635d931f69c41175aa8f1d81d60c
-
SHA1
3e00db6de337ef48f82ed1af80ca998ea86c5601
-
SHA256
444e72d12e85dffc1b247b29e7789022b251237f56ea83bf72e3c09fcb628874
-
SHA512
d9131029f0dbf8f59fa761031f0962c75dbbf138a97344e242434b324110fda7b7e9507b93bbd2224f5bd5cc654e7accce1e9994ddad499e386086d93ded5f13
Malware Config
Extracted
formbook
http://www.elevatedenterprizes.com/h3qo/
dhflow.com
jyindex.com
ezcleanhandle.com
trungtamcongdong.online
simsprotectionagency.com
easylivemeet.com
blackvikingfashionhouse.com
52banxue.com
girlsinit.com
drhemo.com
freethefarmers.com
velvetrosephotography.com
geometricbotaniclas.com
skyandspirit.com
deltacomunicacao.com
mucademy.com
jaboilfieldsolutions.net
howtowinatblackjacknow.com
anytimegrowth.com
simranluthra.com
Targets
-
-
Target
Consignment Document PL&BL Draft.exe
-
Size
318KB
-
MD5
ef20635d931f69c41175aa8f1d81d60c
-
SHA1
3e00db6de337ef48f82ed1af80ca998ea86c5601
-
SHA256
444e72d12e85dffc1b247b29e7789022b251237f56ea83bf72e3c09fcb628874
-
SHA512
d9131029f0dbf8f59fa761031f0962c75dbbf138a97344e242434b324110fda7b7e9507b93bbd2224f5bd5cc654e7accce1e9994ddad499e386086d93ded5f13
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Xloader
Xloader is a rebranded version of Formbook malware.
-
Xloader Payload
-
Suspicious use of SetThreadContext
-