General

  • Target

    5806342415745024.zip

  • Size

    590KB

  • Sample

    210831-qvs8yyptqe

  • MD5

    9110437e204fd3dec75863d5f67ebf04

  • SHA1

    089b53ff10af12953acafd4eecf5e4a54cdca798

  • SHA256

    ddf35d45c7f1257634905c047c8ddfd40e75dcda9ca39a658c00698e25f3db22

  • SHA512

    810750db040ecd33bcbfcc4ef9a9a2e976091ea39718ecf02a9d95b1941cd88657cadd7917f9ada2f2159d963dbef1654ac9830a5b1cb0e08aa777f3e8bc448a

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

vn3b

C2

http://www.lifeafterbobby.com/vn3b/

Decoy

rowenglobal.com

abrirumaempresa.com

videosbet.xyz

blackbettyxt.com

trust-red.net

sonyalpharunors.com

shiqichaoji.com

allex-ru.com

totalpowerpc.store

ptocom.com

quantumsai.club

toughcookie.love

nivafitness.com

bioskopmovie21.com

giatsaygiare.com

xiongmaojingxuan.com

zjjly88.com

trampmotorsports.com

pibblekibble.com

mymounntnittanyhealth.com

Targets

    • Target

      14ebcbc69653d3257eb42c91734bcf2a1ca5dff12c31c06cf955279ea4af5bfd

    • Size

      884KB

    • MD5

      1b415a56616a9f7c2e37fc2ce570664f

    • SHA1

      2e7a5b8378e9a0e5fd7f5a8321af4d128ef2a1a3

    • SHA256

      14ebcbc69653d3257eb42c91734bcf2a1ca5dff12c31c06cf955279ea4af5bfd

    • SHA512

      e77e25ffeae630cc2413fd969462a7fd019738f2981b4304ab6ba4cc5bb9530db3f1210c5cb90665529f6c25c03f6a63362362a18e6bb801edeccc979a0f711b

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

    • Formbook Payload

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.