General
-
Target
SecuriteInfo.com.generic.ml.29418
-
Size
999KB
-
Sample
210122-k5qzmcd3ye
-
MD5
03bfef72c4d962a223cd051d1fe5bbe6
-
SHA1
bb7097101b26eadb4af50f6e2bb21c2cad610217
-
SHA256
f59df25daa1bbe11f38724ad0b36eebc535f1f36ae3796ce5bebe1049cbb57ed
-
SHA512
23b1a4542eb8f530e6984f51e340699c0bda6e03e2c192ef46f61a04358c261ca1f902f5e1c2e36a081fa286f92c4061768e130f38fdca95f3865d9c8cf06874
Malware Config
Extracted
formbook
http://www.huynhanhdung.com/kna/
lawrencefiredepartment.com
executivehomeoffices.com
solfed.world
oshawaexchange.com
webdavlexstore.com
youpieb.com
chiller-master.com
bearstoragetn.com
daf90x16.com
gewhacaalouine.com
simplyezi.com
cstechnologyservices.com
nosyboats.com
thecocomarie.com
vetinaryeco.club
americangoselfilm.com
gdsuhejia.com
verbunden-sein.net
the-minerva.com
loctrantv.com
Targets
-
-
Target
SecuriteInfo.com.generic.ml.29418
-
Size
999KB
-
MD5
03bfef72c4d962a223cd051d1fe5bbe6
-
SHA1
bb7097101b26eadb4af50f6e2bb21c2cad610217
-
SHA256
f59df25daa1bbe11f38724ad0b36eebc535f1f36ae3796ce5bebe1049cbb57ed
-
SHA512
23b1a4542eb8f530e6984f51e340699c0bda6e03e2c192ef46f61a04358c261ca1f902f5e1c2e36a081fa286f92c4061768e130f38fdca95f3865d9c8cf06874
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook Payload
-
Suspicious use of SetThreadContext
-