General
-
Target
7nMMSdGgCXAfKsb.exe
-
Size
931KB
-
Sample
210118-g876544t1a
-
MD5
50439fc35eaebb32f1fdeba8ef12e7c2
-
SHA1
689a97e2c83d0e84aeca38c1330245149ef5ed0d
-
SHA256
65ca40e44ab6171794b0c81d8b80122604eff3aca4614901fcd30db1a5329cfb
-
SHA512
a80705235bbadac3c1d12d953016ddcb9ada91b28f442e61c5bc24babe7b0a39df9874fdbcc1687f28e594fc959b990a5a20be9ddb3f4540257964a1938ee9f0
Malware Config
Extracted
formbook
http://www.besteprobioticakopen.online/uszn/
animegriptape.com
pcpnetworks.com
putupmybabyforadoption.com
xn--jvrr98g37n88d.com
fertinvitro.doctor
undonethread.com
avoleague.com
sissysundays.com
guilhermeoliveiro.site
catholicon-bespeckle.info
mardesuenosfundacion.com
songkhoe24.site
shoecityindia.com
smallbathroomdecor.info
tskusa.com
prairiespringsllc.com
kegncoffee.com
clicklounge.xyz
catholicendoflifeplanning.com
steelobzee.com
Targets
-
-
Target
7nMMSdGgCXAfKsb.exe
-
Size
931KB
-
MD5
50439fc35eaebb32f1fdeba8ef12e7c2
-
SHA1
689a97e2c83d0e84aeca38c1330245149ef5ed0d
-
SHA256
65ca40e44ab6171794b0c81d8b80122604eff3aca4614901fcd30db1a5329cfb
-
SHA512
a80705235bbadac3c1d12d953016ddcb9ada91b28f442e61c5bc24babe7b0a39df9874fdbcc1687f28e594fc959b990a5a20be9ddb3f4540257964a1938ee9f0
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Xloader
Xloader is a rebranded version of Formbook malware.
-
Xloader Payload
-
Suspicious use of SetThreadContext
-