General
-
Target
ec93682406cb590651215da741f3c8d1.exe
-
Size
475KB
-
Sample
210118-8zgk9tsq7a
-
MD5
ec93682406cb590651215da741f3c8d1
-
SHA1
cc6243df7e6b835bf476a41023b8ff4ebb66b9ac
-
SHA256
b88d84be2994a05ac716dac99a689356d8c7ecbd541989a5339be403da909430
-
SHA512
8bcacb9f570546494d0c0c7c301f1d5e6ddf0b20d3af6d2652241e35aaf905e7c46598344413b59ec41f517f6515488749e7df9e5705d523a755013fe6199934
Malware Config
Extracted
formbook
http://www.inreachpt.com/gqx2/
calusaptamiami.com
starlinkwebservices.com
lakeviewbarbershonola.com
oaklandraidersjerseyspop.com
ohiotechreport.com
eligetucafetera.com
tu4343.com
abstract-elearning.com
thebabylashes.com
athleteshive.com
fanninhomesforless.com
sembracna.com
servicesyn.com
bellairechoice.com
tmpaas.com
eyepaa.com
stickerzblvd.com
rentfs.com
nadya-shanab.com
microwgreens.net
Targets
-
-
Target
ec93682406cb590651215da741f3c8d1.exe
-
Size
475KB
-
MD5
ec93682406cb590651215da741f3c8d1
-
SHA1
cc6243df7e6b835bf476a41023b8ff4ebb66b9ac
-
SHA256
b88d84be2994a05ac716dac99a689356d8c7ecbd541989a5339be403da909430
-
SHA512
8bcacb9f570546494d0c0c7c301f1d5e6ddf0b20d3af6d2652241e35aaf905e7c46598344413b59ec41f517f6515488749e7df9e5705d523a755013fe6199934
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Xloader
Xloader is a rebranded version of Formbook malware.
-
Xloader Payload
-
Suspicious use of SetThreadContext
-