General
-
Target
5182734878277632.zip
-
Size
357KB
-
Sample
210921-1erm8safh9
-
MD5
0c4642624f25e4d9cca1e3670b39e29a
-
SHA1
39562c88783a672f570878eb44d446dbceb3c56e
-
SHA256
db8786690ce15dda3cd015a9ab087eee109883b1bbcb905e916dc43202d92245
-
SHA512
cfbba97223fd71fa4f99e9beb1c704dcd2d12727f0e9bfeff458de04dd02f5c23810ec6e38fb2ca26489dd889112135c7e038324ea1095cbd8394f9bae7caab4
Malware Config
Extracted
formbook
4.1
n7ak
http://www.kmresults.com/n7ak/
modischoolcbse.com
theneverwinter.com
rszkjx-vps-hosting.website
fnihil.com
1pbet.com
nnowzscorrez.com
uaotgvjl.icu
starmapsqatar.com
ekisilani.com
extradeepsheets.com
jam-nins.com
buranly.com
orixentertainment.com
rawtech.energy
myol.guru
utex.club
jiapie.com
wowig.store
wweidlyyl.com
systaskautomation.com
Targets
-
-
Target
131218ce7bc6d946ea21940e0b434980b5aaba680514c12d766b8b18e785e2ee
-
Size
832KB
-
MD5
790a8929e2da4ef90724d5459576dbd6
-
SHA1
11e1e157ee06cf0b78d947178e3c1ba5a5bc324b
-
SHA256
131218ce7bc6d946ea21940e0b434980b5aaba680514c12d766b8b18e785e2ee
-
SHA512
176d02efb1c26cfbcba193c55a56530980c82ad6f39a9d6d57e4d975926ebbd61b1c80d41266e4c16be452c29a4c30aec2eff839271e75851052588f0af1e18e
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook Payload
-
Suspicious use of SetThreadContext
-