Overview

overview

10

Static

static

c03061ec3d...da.exe

windows7_x64

10

c03061ec3d...da.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    c03061ec3dfd7cf2856c929735edc6da.exe
  • Size 482KB
  • Sample220113-tprmnabdgk
  • SHA256 e9eaf870b7dc67f068a0e00b8bf7cc5b95bb6f071bbd7d95034268b40ec61649
  • MD5 SHA1 SHA512
Score
10/10
formbookd2z8ratspywarestealertrojan

Malware Config

Extracted

Family

  • formbook

Version

  • 4.1

Campaign

  • d2z8

Decoy

  • jameshenrycfa.com

  • hearing-siemens.com

  • way2noteshub.com

  • metaswapdex.com

  • car-electronic-performance.com

  • aspurgentcare.com

  • htedbchd.website

  • lojakaton.online

  • trukorera.online

  • sevenstoners.com

  • herlihygaragedoors.com

  • starforspotify.com

  • catilaf.com

  • iagroupsocial.com

  • ranchrealestatetx.com

  • wu7btbn1zv9y.xyz

  • realvrz.com

  • needljlane.xyz

  • newsreaderdynamo.com

  • nasser-group.com

Targets

    • Target
      c03061ec3dfd7cf2856c929735edc6da.exe
    • Size 482KB
    • SHA256 e9eaf870b7dc67f068a0e00b8bf7cc5b95bb6f071bbd7d95034268b40ec61649
    • MD5 SHA1 SHA512
    Score
    10/10
    formbookd2z8ratspywarestealertrojan

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Formbook Payload

      rat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks