Overview

overview

10

Static

static

f0f18e49be...a6.exe

windows7_x64

10

f0f18e49be...a6.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f0f18e49bee30cc334ae1bc55b97aaa6.exe

  • Size

    402KB

  • Sample

    211029-ydaxzseaf4

  • MD5

    f0f18e49bee30cc334ae1bc55b97aaa6

  • SHA1

    c27b144816fc67b618b592c36b8455bffd080b80

  • SHA256

    b89374513ef2e5bd74a6922fc049df5d7037136f47c0fa67c6587ea363513958

  • SHA512

    99e7a7ef3474ffac963feb78459ee5eeab4eb77e949fe9d4727b8a9b0fa7d32e06ccfc445a4617254989aaac0eb908e89363efa97838fa8f89eeb882c1d2fa64

Score
10/10
formbookjy0bratspywarestealertrojan

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

jy0b

C2

http://www.filecrev.com/jy0b/

Decoy

lamejorimagen.com

mykabukibrush.com

modgon.com

barefoottherapeutics.com

shimpeg.net

trade-sniper.com

chiangkhancityhotel.com

joblessmoni.club

stespritsubways.com

chico-group.com

nni8.xyz

searchtypically.online

jobsyork.com

bestsales-crypto.com

iqmarketing.info

bullcityphotobooths.com

fwssc.icu

1oc87s.icu

usdiesel.xyz

secrets2optimumnutrition.com

Targets

    • Target

      f0f18e49bee30cc334ae1bc55b97aaa6.exe

    • Size

      402KB

    • MD5

      f0f18e49bee30cc334ae1bc55b97aaa6

    • SHA1

      c27b144816fc67b618b592c36b8455bffd080b80

    • SHA256

      b89374513ef2e5bd74a6922fc049df5d7037136f47c0fa67c6587ea363513958

    • SHA512

      99e7a7ef3474ffac963feb78459ee5eeab4eb77e949fe9d4727b8a9b0fa7d32e06ccfc445a4617254989aaac0eb908e89363efa97838fa8f89eeb882c1d2fa64

    Score
    10/10
    formbookjy0bratspywarestealertrojan

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Formbook Payload

      rat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks