General
-
Target
f0f4b5aa6183bbc5265f26e47aaeb579
-
Size
500KB
-
Sample
210914-y95r8sgcd7
-
MD5
f0f4b5aa6183bbc5265f26e47aaeb579
-
SHA1
81f06990ec9c83d755d5023f95af114d92e68d45
-
SHA256
f8d239a08e27c28f5a5dea56ab895274476ae7360d5d456d89b58d33a392d49c
-
SHA512
3bc8bb2ac4dc15c484aac016b5c09ff55c45f7db2127a10ba5621711d66dc6287ad109906a1707dcbf0f6c8ba0078b8f6b4603e4a6365726ef419aabe7cf02e6
Malware Config
Extracted
formbook
4.1
m8g0
http://www.corbvalperu.com/m8g0/
exclusivecan.com
junzhesuji.com
acces-credit-mutuel.com
iknitvintage.com
solonmodelun.com
debekia.com
peanutskitchen.com
kamanantzin.com
personalmodeststyle.com
qo49.com
googman.site
maisonshahnaz.com
annaalexandrovich.com
californiacashcars.com
ncafashionboutique.com
nsu0.com
cloudfirstlender.com
allforchildren.net
vn80000.com
restroon.com
Targets
-
-
Target
f0f4b5aa6183bbc5265f26e47aaeb579
-
Size
500KB
-
MD5
f0f4b5aa6183bbc5265f26e47aaeb579
-
SHA1
81f06990ec9c83d755d5023f95af114d92e68d45
-
SHA256
f8d239a08e27c28f5a5dea56ab895274476ae7360d5d456d89b58d33a392d49c
-
SHA512
3bc8bb2ac4dc15c484aac016b5c09ff55c45f7db2127a10ba5621711d66dc6287ad109906a1707dcbf0f6c8ba0078b8f6b4603e4a6365726ef419aabe7cf02e6
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook Payload
-
Suspicious use of SetThreadContext
-