Overview

overview

10

Static

static

b6873c361a...cc.exe

windows7_x64

10

b6873c361a...cc.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b6873c361a8425e246ec48b418f8c1cc.exe

  • Size

    369KB

  • Sample

    210813-fy3r2ykrdn

  • MD5

    b6873c361a8425e246ec48b418f8c1cc

  • SHA1

    d4f5564a35ad83e397e83fe48766d897f2f9d66f

  • SHA256

    cd47b9cf6fd8f8d3ef5f8dd967c8a2ddabfc65db1c1b53a70d99ba2deb42678e

  • SHA512

    b3874be03f508e278beee72658fbce951d9232a725dbe3f6f2a8fd9ba244b219489497468a91eb2ed4bda313a72296ef41b7d5be11b0e67e2fb2e8a186d6fa41

Score
10/10
formbookdd2vratspywarestealertrojan

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

dd2v

C2

http://www.fortmyerscruisevacation.com/dd2v/

Decoy

jkrqzmeyd.icu

cbluedottvwdshop.com

yhchen.space

premierhealthnwellness.com

szkuyaju.com

harvestmoonloans.net

dadematerial.com

mariaclarahairstudio.com

hwunvy.online

puloutjbmere.com

kossu1989.com

dubbedos.com

ncylis.com

hybrid-sol.com

travelature.com

gracefulcounts.com

66secretgarden.com

eslonyourcell.com

wisersponsorship.com

sepn3.com

Targets

    • Target

      b6873c361a8425e246ec48b418f8c1cc.exe

    • Size

      369KB

    • MD5

      b6873c361a8425e246ec48b418f8c1cc

    • SHA1

      d4f5564a35ad83e397e83fe48766d897f2f9d66f

    • SHA256

      cd47b9cf6fd8f8d3ef5f8dd967c8a2ddabfc65db1c1b53a70d99ba2deb42678e

    • SHA512

      b3874be03f508e278beee72658fbce951d9232a725dbe3f6f2a8fd9ba244b219489497468a91eb2ed4bda313a72296ef41b7d5be11b0e67e2fb2e8a186d6fa41

    Score
    10/10
    formbookdd2vratspywarestealertrojan

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Formbook Payload

      rat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

1
T1130

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks