General

  • Target
    Racun je u prilogu.exe
  • Size 710KB
  • Sample211124-y8e57agha5
  • SHA256 41469a749da51e8aa7e1ea159041bf74f712dd4f23f076188f547ee0c0f7933f
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • formbook

Version
  • 4.1

Campaign
  • 3nop

C2
  • http://www.jakesplacebarbers.com/3nop/

Decoy
  • videohm.com

  • panache-rose.com

  • alnooncars-kw.com

  • trueblue2u.com

  • brussels-cafe.com

  • ip2c.net

  • influenzerr.com

  • rbcoq.com

  • zzful.com

  • drainthe.com

  • sumaholesson.com

  • cursosaprovados.com

  • genotecinc.com

  • dbrulhart.com

  • theapiarystudios.com

  • kensyu-kan.com

  • dkku88.com

  • tikhyper.com

  • aztecnort.com

  • homebrim.com

Targets

    • Target
      Racun je u prilogu.exe
    • Size 710KB
    • SHA256 41469a749da51e8aa7e1ea159041bf74f712dd4f23f076188f547ee0c0f7933f
    • MD5 SHA1 SHA512

MITRE ATT&CK Enterprise v6

Tasks