General

  • Target

    allegato nuovo ordine.exe

  • Size

    934KB

  • Sample

    220303-ebw8nahbc5

  • MD5

    0382aa0592f578106c47345990f7fd56

  • SHA1

    4837493a5c7f9e2de9f645a2fc15801e82b4f54d

  • SHA256

    6c18b064240861b42aa8fadbea5472fdce174a4d2b1510d53cba2b28779602d7

  • SHA512

    fe17d1e94de451ea7c4f154508cd65f931cbebc5c838ba22691a33ef108a58c4fa142d602b4cd14f4bd1dce3495b88c3734743488b7072e6fb6bd040fb8262e4

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

3nop

Decoy

videohm.com

panache-rose.com

alnooncars-kw.com

trueblue2u.com

brussels-cafe.com

ip2c.net

influenzerr.com

rbcoq.com

zzful.com

drainthe.com

sumaholesson.com

cursosaprovados.com

genotecinc.com

dbrulhart.com

theapiarystudios.com

kensyu-kan.com

dkku88.com

tikhyper.com

aztecnort.com

homebrim.com

Targets

    • Target

      allegato nuovo ordine.exe

    • Size

      934KB

    • MD5

      0382aa0592f578106c47345990f7fd56

    • SHA1

      4837493a5c7f9e2de9f645a2fc15801e82b4f54d

    • SHA256

      6c18b064240861b42aa8fadbea5472fdce174a4d2b1510d53cba2b28779602d7

    • SHA512

      fe17d1e94de451ea7c4f154508cd65f931cbebc5c838ba22691a33ef108a58c4fa142d602b4cd14f4bd1dce3495b88c3734743488b7072e6fb6bd040fb8262e4

MITRE ATT&CK Matrix ATT&CK v6

Persistence

Registry Run Keys / Startup Folder

1
T1060

Defense Evasion

Modify Registry

2
T1112

Install Root Certificate

1
T1130

Tasks