General
-
Target
78977c6e1352baf3e4659e10724ac05f.exe
-
Size
644KB
-
Sample
210115-wg3zp55mq6
-
MD5
78977c6e1352baf3e4659e10724ac05f
-
SHA1
7a81e17504370035e70e0452b772fef857e5e169
-
SHA256
c41c3e04f58d643f5d30f52077a53a8c151d835aa44da144b9165a0297314f14
-
SHA512
f83606e8789dbc00321eb48a8521c4e75f48ca2fc0b6f60cb90ad9ff58e8b5cf3102a4382a806a4b5c30986446d7cb2b9df684e74b47f3da95eec5fd676e4559
Malware Config
Extracted
formbook
http://www.learnhour.net/eaud/
modshiro.com
mademarketingoss.com
austinjourls.info
wayupteam.com
crossingfinger.com
interseptors.com
gigashit.com
livetigo.com
halamankuningindonesia.com
windhammills.com
aylinahmet.com
mbacexonan.website
shopboxbarcelona.com
youyeslive.com
coonlinesportsbooks.com
guorunme.com
putlocker2.site
pencueaidnetwork.com
likevector.com
vulcanudachi-proclub.com
Targets
-
-
Target
78977c6e1352baf3e4659e10724ac05f.exe
-
Size
644KB
-
MD5
78977c6e1352baf3e4659e10724ac05f
-
SHA1
7a81e17504370035e70e0452b772fef857e5e169
-
SHA256
c41c3e04f58d643f5d30f52077a53a8c151d835aa44da144b9165a0297314f14
-
SHA512
f83606e8789dbc00321eb48a8521c4e75f48ca2fc0b6f60cb90ad9ff58e8b5cf3102a4382a806a4b5c30986446d7cb2b9df684e74b47f3da95eec5fd676e4559
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Xloader
Xloader is a rebranded version of Formbook malware.
-
Xloader Payload
-
Suspicious use of SetThreadContext
-