General
-
Target
6560475178500096.zip
-
Size
241KB
-
Sample
211012-tz58sscfbl
-
MD5
625f76559e5e65a360da161b7700dd43
-
SHA1
c56ad42aa7184eeb256ccc9dee728fc20c7fc650
-
SHA256
a21a700fece84c6147e440250f69bb5bede2a524de1b138bcc73a6cab55e69c2
-
SHA512
0d83e81622950a85ba64706cad1628b511bd6a496f0fe6bec2b5057b80c3ee9b84b1c3d98a756aeb80ce6794b77852b4b681b303df2fd525b2ed64c0c2a85e2f
Malware Config
Extracted
formbook
4.1
dn7r
http://www.yourherogarden.net/dn7r/
eventphotographerdfw.com
thehalalcoinstaking.com
philipfaziofineart.com
intercoh.com
gaiaseyephotography.com
chatbotforrealestate.com
lovelancemg.com
marlieskasberger.com
elcongoenespanol.info
lepirecredit.com
distribution-concept.com
e99game.com
exit11festival.com
twodollartoothbrushclub.com
cocktailsandlawn.com
performimprove.network
24horas-telefono-11840.com
cosmossify.com
kellenleote.com
perovskite.energy
Targets
-
-
Target
336a2648e0811ebd11a94bb59c5cd5ea06ff48485f734ce149a3f9f9a7e0c7f4
-
Size
252KB
-
MD5
b16bb2a4fe3ee1b986926530169eeb44
-
SHA1
b4c9eb0cc26a50743d51ee56ea7639a64f43dafa
-
SHA256
336a2648e0811ebd11a94bb59c5cd5ea06ff48485f734ce149a3f9f9a7e0c7f4
-
SHA512
2c5e2ff040d22683dfd4b366048f21db8e8f9c9ef636501a73539ac92b61d60818aa049ba265080275151b8f7cb317b68dfd9e4ff9777c867eac20fd8f798d68
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook Payload
-
Loads dropped DLL
-
Suspicious use of SetThreadContext
-