General
-
Target
DEX182020.exe
-
Size
1.2MB
-
Sample
210119-p7l8l88xrn
-
MD5
66293734d46edcbe3ff8c366c9fc1553
-
SHA1
d2012092877e4b81935eaa73c10b34b2776905f6
-
SHA256
521da6e78157628ac55eb060e5596f98387fd4659e291ff72f56efc9a0734022
-
SHA512
5f84ba1f96eb3f928988802bb3c092fa639abfbe58311525182c3786a979ce1aa3fe8292ac99ae48e1b15bd82a812ca9a21a011c69bea4ea372e884c5a2e0518
Malware Config
Extracted
formbook
http://www.a-emeservice.com/m8ec/
thomascraigwealth.com
melbournemedicalhealth.net
tdxcoin.com
lukassbprojects.net
aldemallc.com
moqawalat-kuwait.com
txcsco.com
jobcarepro.com
sedotwcmedanmurah.com
niconthenine.com
radliffrehab.com
infiniteechogroup.com
stellantis-luxury-rent.com
ibusehat.info
resellerauctions.com
softwarexprogrammers.com
bumpnlifestyle.com
mintmacher.com
partapprintercare.com
justrightinsurance.com
Targets
-
-
Target
DEX182020.exe
-
Size
1.2MB
-
MD5
66293734d46edcbe3ff8c366c9fc1553
-
SHA1
d2012092877e4b81935eaa73c10b34b2776905f6
-
SHA256
521da6e78157628ac55eb060e5596f98387fd4659e291ff72f56efc9a0734022
-
SHA512
5f84ba1f96eb3f928988802bb3c092fa639abfbe58311525182c3786a979ce1aa3fe8292ac99ae48e1b15bd82a812ca9a21a011c69bea4ea372e884c5a2e0518
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Xloader
Xloader is a rebranded version of Formbook malware.
-
Xloader Payload
-
Suspicious use of SetThreadContext
-