Overview

overview

10

Static

static

1

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1631edd29c03c5b7b26a93590e8f5959bd033cf8c80758b1ecc40a69f678e264

  • Size

    306KB

  • Sample

    211213-qqqj7sdfa6

  • MD5

    a4c34ec89966a552a5cacb6956f78ac5

  • SHA1

    ba3f3bc17eefc641664df68cc01b91669d295c6c

  • SHA256

    1631edd29c03c5b7b26a93590e8f5959bd033cf8c80758b1ecc40a69f678e264

  • SHA512

    3c3e62ea25199a6c4e9bb4070b6daf6e220d480d2ae21f1ad47b7859a59659dbf42a8397d461d5f2dd1780fc6e114e9c60bccd1c76bb0a3cd975d1cbb0680f0b

Score
10/10
formbookh4d0ratspywarestealertrojan

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

h4d0

C2

http://www.voxelsoxx.xyz/h4d0/

Decoy

onlinefinejewelry.com

samstringermusic.com

beam-lettings.info

optimumcoin.xyz

fasa.xyz

creativedime.com

eihncuz.online

griffin2008.top

europcarlive.com

jxhcar.com

museumsshop.international

bonolaboral-lnterbank.com

kelebandis.xyz

hiddenlakeranch.net

carelessyouth.com

jfkilfoil.store

potok-it-ua.site

magdulemediation.com

shakadal.xyz

coastconstructionfl.com

Targets

    • Target

      1631edd29c03c5b7b26a93590e8f5959bd033cf8c80758b1ecc40a69f678e264

    • Size

      306KB

    • MD5

      a4c34ec89966a552a5cacb6956f78ac5

    • SHA1

      ba3f3bc17eefc641664df68cc01b91669d295c6c

    • SHA256

      1631edd29c03c5b7b26a93590e8f5959bd033cf8c80758b1ecc40a69f678e264

    • SHA512

      3c3e62ea25199a6c4e9bb4070b6daf6e220d480d2ae21f1ad47b7859a59659dbf42a8397d461d5f2dd1780fc6e114e9c60bccd1c76bb0a3cd975d1cbb0680f0b

    Score
    10/10
    formbookh4d0ratspywarestealertrojan

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Formbook Payload

      rat

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks