General
-
Target
075bd1e3e3e0c01794ee6a84be2c585a
-
Size
722KB
-
Sample
211125-x28ngsbfe4
-
MD5
075bd1e3e3e0c01794ee6a84be2c585a
-
SHA1
984a18333bcd137d00a2223a10b83946f0b3949d
-
SHA256
42173f59707de5929c3bc6cd37d5e0dc55d990bce2c29aa6deac6e86c3eec250
-
SHA512
d00a949f26740996d4da000abc5b5241d812d3c7d1a1d0a92863a11f825b79333f20b4105bb2eaad67472f1229e35bd6e056a27be5c4418d639d18aeed3fc676
Malware Config
Extracted
formbook
4.1
9gr5
http://www.cuteprofessionalscrubs.com/9gr5/
newleafcosmetix.com
richermanscastle.com
ru-remonton.com
2diandongche.com
federaldados.design
jeffreycookweb.com
facecs.online
xmeclarn.xyz
olgasmith.xyz
sneakersonlinesale.com
playboyshiba.com
angelamiglioli.com
diitaldefynd.com
whenevergames.com
mtheartcustom.com
vitalactivesupply.com
twistblogr.com
xn--i8s140at3d6u7c.tel
baudelaireelhakim.com
real-estate-miami-searcher.site
Targets
-
-
Target
075bd1e3e3e0c01794ee6a84be2c585a
-
Size
722KB
-
MD5
075bd1e3e3e0c01794ee6a84be2c585a
-
SHA1
984a18333bcd137d00a2223a10b83946f0b3949d
-
SHA256
42173f59707de5929c3bc6cd37d5e0dc55d990bce2c29aa6deac6e86c3eec250
-
SHA512
d00a949f26740996d4da000abc5b5241d812d3c7d1a1d0a92863a11f825b79333f20b4105bb2eaad67472f1229e35bd6e056a27be5c4418d639d18aeed3fc676
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook Payload
-
Suspicious use of SetThreadContext
-