General
-
Target
d2b010fbc0202fa72ce504bcf841e117e4e52158c6d97a2830ede547f9f89e6c
-
Size
530KB
-
Sample
211119-s8pfzaaggr
-
MD5
101d83cd768b6024fad35f48be05f195
-
SHA1
ec7d99893f490a1278cc44d15dbcd4e4913411c1
-
SHA256
d2b010fbc0202fa72ce504bcf841e117e4e52158c6d97a2830ede547f9f89e6c
-
SHA512
654ff9e358df73bc5adbafd5c170a7d6a60e34f7404e528d74b58fd7c89fe272962d860707ed314c0e98de8ef37b346a62fc8de98eec0acf10af492f88385c28
Malware Config
Extracted
formbook
4.1
ob7y
http://www.metanewsroom.net/ob7y/
ipsdjf.com
mlphntec.com
restaurant-day.store
writeramylong.com
flokigamefi.com
usetianyi.xyz
punishstrikebreaker.quest
ericnfleming.com
dhhwtieen.xyz
milfhackers.com
fewefie.store
pithstsdiet.store
kirsten-hemmerich.com
casinolopoca.com
sigag.xyz
geilepoes.com
metawhatsapp.art
sarjin.xyz
toprabatte.net
lotofbrave.club
Targets
-
-
Target
d2b010fbc0202fa72ce504bcf841e117e4e52158c6d97a2830ede547f9f89e6c
-
Size
530KB
-
MD5
101d83cd768b6024fad35f48be05f195
-
SHA1
ec7d99893f490a1278cc44d15dbcd4e4913411c1
-
SHA256
d2b010fbc0202fa72ce504bcf841e117e4e52158c6d97a2830ede547f9f89e6c
-
SHA512
654ff9e358df73bc5adbafd5c170a7d6a60e34f7404e528d74b58fd7c89fe272962d860707ed314c0e98de8ef37b346a62fc8de98eec0acf10af492f88385c28
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook Payload
-
Suspicious use of SetThreadContext
-