General
-
Target
08554cb035e1c8f14b980019ffae237c.exe
-
Size
1.4MB
-
Sample
210119-9kaaqact8a
-
MD5
08554cb035e1c8f14b980019ffae237c
-
SHA1
2d64711f6503c3b6ffd792aa0119efffae61883d
-
SHA256
a243e6a605d8bb403f4cacb90a290d8f415d523dcc3c6eeedcf72f5cf803efa4
-
SHA512
540d02b2748201c115ef4d763d78167bc3d659fd75f927e7750c5aee8a7d6c268f7b80ff6c5d7df49555c5f3c9175760275f337b8bbeba558d83b9586f93a094
Malware Config
Extracted
formbook
http://www.stonescapes1.com/de92/
zindaginews.com
tyelevator.com
schustermaninterests.com
algemixdelchef.com
doubscollectivites.com
e-butchery.com
hellbentmask.com
jumbpprivacy.com
teeniestiedye.com
playfulartwork.com
desertvacahs.com
w5470-hed.net
nepalearningpods.com
smoothandsleek.com
thecannaglow.com
torrentkittyla.com
industrytoyou.com
raquelvargas.net
rlc-nc.net
cryptoprises.com
Targets
-
-
Target
08554cb035e1c8f14b980019ffae237c.exe
-
Size
1.4MB
-
MD5
08554cb035e1c8f14b980019ffae237c
-
SHA1
2d64711f6503c3b6ffd792aa0119efffae61883d
-
SHA256
a243e6a605d8bb403f4cacb90a290d8f415d523dcc3c6eeedcf72f5cf803efa4
-
SHA512
540d02b2748201c115ef4d763d78167bc3d659fd75f927e7750c5aee8a7d6c268f7b80ff6c5d7df49555c5f3c9175760275f337b8bbeba558d83b9586f93a094
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Xloader
Xloader is a rebranded version of Formbook malware.
-
Xloader Payload
-
Suspicious use of SetThreadContext
-