General
-
Target
f69047c67c621e68c5b21d46fa60a629.exe
-
Size
596KB
-
Sample
210121-d18kbb9s86
-
MD5
f69047c67c621e68c5b21d46fa60a629
-
SHA1
806f17aaa650c367015db5792319650b3bd59502
-
SHA256
e29bf0082c57f6a228883a9c3c8b727dc68705f4780d6275870958c81d747290
-
SHA512
7af7fe9f4181d099afb56f7ec58d51b441738dd19be46b0e07497737cb38568cc061b41d7623df08eaf6b4b902219e220fc923aaf72da8d4567e246e0fcb6289
Malware Config
Extracted
formbook
http://www.learnhour.net/eaud/
modshiro.com
mademarketingoss.com
austinjourls.info
wayupteam.com
crossingfinger.com
interseptors.com
gigashit.com
livetigo.com
halamankuningindonesia.com
windhammills.com
aylinahmet.com
mbacexonan.website
shopboxbarcelona.com
youyeslive.com
coonlinesportsbooks.com
guorunme.com
putlocker2.site
pencueaidnetwork.com
likevector.com
vulcanudachi-proclub.com
Targets
-
-
Target
f69047c67c621e68c5b21d46fa60a629.exe
-
Size
596KB
-
MD5
f69047c67c621e68c5b21d46fa60a629
-
SHA1
806f17aaa650c367015db5792319650b3bd59502
-
SHA256
e29bf0082c57f6a228883a9c3c8b727dc68705f4780d6275870958c81d747290
-
SHA512
7af7fe9f4181d099afb56f7ec58d51b441738dd19be46b0e07497737cb38568cc061b41d7623df08eaf6b4b902219e220fc923aaf72da8d4567e246e0fcb6289
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Xloader
Xloader is a rebranded version of Formbook malware.
-
Xloader Payload
-
Suspicious use of SetThreadContext
-