General
-
Target
806f81ab862618774ee7a5a197af916c.exe
-
Size
968KB
-
Sample
210119-erhf2v7kh2
-
MD5
806f81ab862618774ee7a5a197af916c
-
SHA1
347c8bea6d0434f82ee7332d8b59705314e0e49a
-
SHA256
182fd1343975d43f456f199f379210d562d15ea3c8e4c7bd59899d75c18a2fe9
-
SHA512
7d93b04da992cba93e29e69fa548c9415a9a22b9f3d7a357e2271c622cf73c11479c373102b9d2f10b255ade8e8874c2729be1b1ea968c31a0b9126630b6d3ec
Malware Config
Extracted
formbook
http://www.aftabzahur.com/wgn/
kokokara-life-blog.com
faswear.com
futureleadershiptoday.com
date4done.xyz
thecouponinn.com
bbeycarpetsf.com
propolisnasalspray.com
jinjudiamond.com
goodevectors.com
nehyam.com
evalinkapuppets.com
what-if-statistics.com
rateofrisk.com
impacttestonlinne.com
servis-kaydet.info
coloniacafe.com
marcemarketing.com
aarigging.com
goddesswitchery.com
jasqblo.icu
Targets
-
-
Target
806f81ab862618774ee7a5a197af916c.exe
-
Size
968KB
-
MD5
806f81ab862618774ee7a5a197af916c
-
SHA1
347c8bea6d0434f82ee7332d8b59705314e0e49a
-
SHA256
182fd1343975d43f456f199f379210d562d15ea3c8e4c7bd59899d75c18a2fe9
-
SHA512
7d93b04da992cba93e29e69fa548c9415a9a22b9f3d7a357e2271c622cf73c11479c373102b9d2f10b255ade8e8874c2729be1b1ea968c31a0b9126630b6d3ec
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook Payload
-
Suspicious use of SetThreadContext
-