General

  • Target

    Yeni siparis listesi.exe

  • Size

    817KB

  • Sample

    220309-sj3mashgb3

  • MD5

    348601ee9843b206db97a5d03546a4fc

  • SHA1

    f13ac3d7f55aec7c3f23cd887baa8842b4b936aa

  • SHA256

    6fc9563d971fe534d3b73811ed493784a02bab6f4a0c13362c762a33eb59300b

  • SHA512

    bbd59cf94ac0e22af978967af5479fa9b053a60cd23685aac05568d2e55baa810ac73d93786303ffc1eb00bd973de4ae8146fe86d3050837f36acb2e38a39613

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

3nop

Decoy

videohm.com

panache-rose.com

alnooncars-kw.com

trueblue2u.com

brussels-cafe.com

ip2c.net

influenzerr.com

rbcoq.com

zzful.com

drainthe.com

sumaholesson.com

cursosaprovados.com

genotecinc.com

dbrulhart.com

theapiarystudios.com

kensyu-kan.com

dkku88.com

tikhyper.com

aztecnort.com

homebrim.com

Targets

    • Target

      Yeni siparis listesi.exe

    • Size

      817KB

    • MD5

      348601ee9843b206db97a5d03546a4fc

    • SHA1

      f13ac3d7f55aec7c3f23cd887baa8842b4b936aa

    • SHA256

      6fc9563d971fe534d3b73811ed493784a02bab6f4a0c13362c762a33eb59300b

    • SHA512

      bbd59cf94ac0e22af978967af5479fa9b053a60cd23685aac05568d2e55baa810ac73d93786303ffc1eb00bd973de4ae8146fe86d3050837f36acb2e38a39613

MITRE ATT&CK Matrix ATT&CK v6

Persistence

Registry Run Keys / Startup Folder

1
T1060

Defense Evasion

Modify Registry

1
T1112

Tasks