General
-
Target
e993dc4733d3db72ebb90a0e2aa6c0e665ac6bb1679c5235ed8df88a9091dacd
-
Size
558KB
-
Sample
220201-dg573sgbh9
-
MD5
b3176738f06cad7acfa8040b9f1af3d7
-
SHA1
e24e0b92874580b4004be986a584e21ed664fd98
-
SHA256
e993dc4733d3db72ebb90a0e2aa6c0e665ac6bb1679c5235ed8df88a9091dacd
-
SHA512
f396ebc7f57c774419071afebd13bb257194e119602838b35f03214ac60a8644f54a9892a9d915704d20c5aa87871e9db5ca467355616e7632a6f4c5ebea451b
Malware Config
Extracted
formbook
3.9
cy
certificat-messagerie.com
smyeocover.win
propaganda.team
ch-anjun.com
spending.ltd
uiagw.info
cl54n6kgzl.biz
chretienscomplementaires.com
preparedtraffictoupdate.date
pvhappsint-dev.com
medicalstudynews.com
financial.sydney
scr2d.com
mihamacco.com
yijiazhanju.com
fengkuang28.com
xn--p8j0c.net
duobuorg.com
dennisshapovalov.com
aydinefeler21noluasm.com
Targets
-
-
Target
e993dc4733d3db72ebb90a0e2aa6c0e665ac6bb1679c5235ed8df88a9091dacd
-
Size
558KB
-
MD5
b3176738f06cad7acfa8040b9f1af3d7
-
SHA1
e24e0b92874580b4004be986a584e21ed664fd98
-
SHA256
e993dc4733d3db72ebb90a0e2aa6c0e665ac6bb1679c5235ed8df88a9091dacd
-
SHA512
f396ebc7f57c774419071afebd13bb257194e119602838b35f03214ac60a8644f54a9892a9d915704d20c5aa87871e9db5ca467355616e7632a6f4c5ebea451b
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook Payload
-
Suspicious use of SetThreadContext
-