Overview

overview

10

Static

static

5d4fd662a9...53.exe

windows7_x64

10

5d4fd662a9...53.exe

windows10-2004_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    5d4fd662a91cb6f89ef88b7a609d5a53
  • Size 715KB
  • Sample220412-qc774abedm
  • SHA256 bce2bc3a55dfecfd388b134663893b70c3830b20a8afa395e36a28097e305943
  • MD5 SHA1 SHA512
Score
10/10
formbooka2rsratspywarestealertrojan

Malware Config

Extracted

Family

  • formbook

Version

  • 4.1

Campaign

  • a2rs

Decoy

  • hypex-mc.xyz

  • lionsofeurope.info

  • syomilikipiade-uraa.online

  • gharpetutor.com

  • 369mfkp.com

  • menucart.biz

  • sdew.club

  • placidtalk.com

  • rus-service.com

  • laidudu.net

  • 552342.com

  • sant-trust.com

  • thefaithpusher.website

  • homepaintherapybox.com

  • indezac.com

  • hiddenvalleybarns.com

  • haocolor.store

  • retiringwellcoach.com

  • lfcr.xyz

  • renzogracieinstitute.com

Targets

    • Target
      5d4fd662a91cb6f89ef88b7a609d5a53
    • Size 715KB
    • SHA256 bce2bc3a55dfecfd388b134663893b70c3830b20a8afa395e36a28097e305943
    • MD5 SHA1 SHA512
    Score
    10/10
    formbooka2rsratspywarestealertrojan

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Formbook Payload

      rat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks