General
-
Target
SecuriteInfo.com.Trojan.PackedNET.507.549.448
-
Size
432KB
-
Sample
210119-jkd7t2955e
-
MD5
528c0afa9442eb19e7d109832366432c
-
SHA1
5c523cd2a67ed3e1e7cb8820f46cc6c9677ae505
-
SHA256
d433e7ca5197ed83d851161b45aa94ae8b469a2c711b7a327d749c32279785f5
-
SHA512
e1e3ded8f77568156a5410c3d03df0875d92071e5a744fe7bad7d15662e141317efc9a3e64c8a7532f2053c18d660945f5de059be15f9ae622a0af5297340140
Malware Config
Extracted
formbook
http://www.learnhour.net/eaud/
modshiro.com
mademarketingoss.com
austinjourls.info
wayupteam.com
crossingfinger.com
interseptors.com
gigashit.com
livetigo.com
halamankuningindonesia.com
windhammills.com
aylinahmet.com
mbacexonan.website
shopboxbarcelona.com
youyeslive.com
coonlinesportsbooks.com
guorunme.com
putlocker2.site
pencueaidnetwork.com
likevector.com
vulcanudachi-proclub.com
Targets
-
-
Target
SecuriteInfo.com.Trojan.PackedNET.507.549.448
-
Size
432KB
-
MD5
528c0afa9442eb19e7d109832366432c
-
SHA1
5c523cd2a67ed3e1e7cb8820f46cc6c9677ae505
-
SHA256
d433e7ca5197ed83d851161b45aa94ae8b469a2c711b7a327d749c32279785f5
-
SHA512
e1e3ded8f77568156a5410c3d03df0875d92071e5a744fe7bad7d15662e141317efc9a3e64c8a7532f2053c18d660945f5de059be15f9ae622a0af5297340140
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Xloader
Xloader is a rebranded version of Formbook malware.
-
Xloader Payload
-
Suspicious use of SetThreadContext
-