General
-
Target
e09bd175e140134c2d836a8c422bb3eb.exe
-
Size
1.0MB
-
Sample
210121-eg9rablg66
-
MD5
e09bd175e140134c2d836a8c422bb3eb
-
SHA1
a601aaaf82eb6cf0263152f6ad97a2b810924733
-
SHA256
7d47ed47853921d8afd5b66c6305421eb80b582d6e47706602d52ee367496cc1
-
SHA512
bda9f748a764db3e738e9026f364566f0dfb5e2eb34b63a52438fb021b0843c51bb95ca8196149bf4d40d6a78e90d7ff55d0c536b998625cd7cc0ddacd701fcf
Malware Config
Extracted
formbook
http://www.bodyfuelrtd.com/8rg4/
fakecostasunglasses.com
twinbrothers.pizza
jizhoujsp.com
qscrit.com
hotelmanise.com
fer-ua.online
europserver-simcloud.systems
redwap2.pro
betwalkoffame.com
latashalovemillionaire.com
8million-lr.com
tomatrader.com
modaluxcutabovefitness.com
shishijiazu.com
cckytx.com
reversehomeloansmiami.com
imaginenationnetwork.com
thecyclistshop.com
jorgegiljewelry.com
hlaprotiens.com
Targets
-
-
Target
e09bd175e140134c2d836a8c422bb3eb.exe
-
Size
1.0MB
-
MD5
e09bd175e140134c2d836a8c422bb3eb
-
SHA1
a601aaaf82eb6cf0263152f6ad97a2b810924733
-
SHA256
7d47ed47853921d8afd5b66c6305421eb80b582d6e47706602d52ee367496cc1
-
SHA512
bda9f748a764db3e738e9026f364566f0dfb5e2eb34b63a52438fb021b0843c51bb95ca8196149bf4d40d6a78e90d7ff55d0c536b998625cd7cc0ddacd701fcf
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Xloader
Xloader is a rebranded version of Formbook malware.
-
Xloader Payload
-
Suspicious use of SetThreadContext
-