General

  • Target

    factura_cont.exe

  • Size

    901KB

  • Sample

    220302-s4zfdafde5

  • MD5

    f0d6bc51b5c33449bcf560ca6ae37647

  • SHA1

    b872d2ef656561e49a0950a898ffe4387f0b4d86

  • SHA256

    0993f7e7419bebf3509e30ea7a16f881f47875eb93b5e2615b280681c7e6629c

  • SHA512

    e642dae88c97311ec898ed8d66ac4f8f2104393845a534cf35bd1fb09e3f63e1af89f2320689184ec02077d519bebf611941e6d33309a044d6679db9950c70d6

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

3nop

Decoy

videohm.com

panache-rose.com

alnooncars-kw.com

trueblue2u.com

brussels-cafe.com

ip2c.net

influenzerr.com

rbcoq.com

zzful.com

drainthe.com

sumaholesson.com

cursosaprovados.com

genotecinc.com

dbrulhart.com

theapiarystudios.com

kensyu-kan.com

dkku88.com

tikhyper.com

aztecnort.com

homebrim.com

Targets

    • Target

      factura_cont.exe

    • Size

      901KB

    • MD5

      f0d6bc51b5c33449bcf560ca6ae37647

    • SHA1

      b872d2ef656561e49a0950a898ffe4387f0b4d86

    • SHA256

      0993f7e7419bebf3509e30ea7a16f881f47875eb93b5e2615b280681c7e6629c

    • SHA512

      e642dae88c97311ec898ed8d66ac4f8f2104393845a534cf35bd1fb09e3f63e1af89f2320689184ec02077d519bebf611941e6d33309a044d6679db9950c70d6

MITRE ATT&CK Matrix ATT&CK v6

Persistence

Registry Run Keys / Startup Folder

1
T1060

Defense Evasion

Modify Registry

1
T1112

Tasks