Overview

overview

10

Static

static

10

2.exe

windows7_x64

10

2.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2.exe

  • Size

    184KB

  • Sample

    211015-hg9mqaafc2

  • MD5

    57fc9c24357ac2cde150537ae8a42884

  • SHA1

    70fdc837d404f465f4af739d7415c24023f437ed

  • SHA256

    eab2de096cfe890da97a654fb7c14097b1c15242cca986d90811c5722c95b416

  • SHA512

    52e6f1d1a6aa7862de48add0b1f1a06d83b72efa5c8856256e3caf2110a457f42c45f54ba8a85776779e201bd12fc8176cd31c1bd8ab500b076096da89adee27

Score
10/10
formbookbc3sratspywarestealertrojan

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

bc3s

C2

http://www.topei-products.com/bc3s/

Decoy

anna-ng.com

mariangelamata.com

szqnbl.com

nesherguitars.com

mysekrit.com

againbeautyviensui.xyz

appf.life

bilalsolution.com

technoratii.com

11restoran.com

birthingly.com

crystalcarrillo.com

cohenasset.info

bunchofdesign.com

highstreetmag.com

talentkerning.com

outdoor-glassesadvice.com

aliceeety.com

habbuhot.info

pao91.com

Targets

    • Target

      2.exe

    • Size

      184KB

    • MD5

      57fc9c24357ac2cde150537ae8a42884

    • SHA1

      70fdc837d404f465f4af739d7415c24023f437ed

    • SHA256

      eab2de096cfe890da97a654fb7c14097b1c15242cca986d90811c5722c95b416

    • SHA512

      52e6f1d1a6aa7862de48add0b1f1a06d83b72efa5c8856256e3caf2110a457f42c45f54ba8a85776779e201bd12fc8176cd31c1bd8ab500b076096da89adee27

    Score
    10/10
    formbookbc3sratspywarestealertrojan

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Formbook Payload

      rat

    • Deletes itself

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks