Overview

overview

10

Static

static

f0772fc90b...ba.exe

windows7_x64

10

f0772fc90b...ba.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f0772fc90b67e9d3d2ff1ecbb58397a8bd954f9ea0f811b77e1d5da835b197ba

  • Size

    538KB

  • Sample

    220418-nzzhcsebgp

  • MD5

    ea20d26564f8916c1d80b7e2ad7bc292

  • SHA1

    644fa741f99f0ab8db5bfecd6913d56cf6b606cb

  • SHA256

    f0772fc90b67e9d3d2ff1ecbb58397a8bd954f9ea0f811b77e1d5da835b197ba

  • SHA512

    7cafe98d8f2c89e875377099288d1c98f1ad7a6d494c21a1a9eec21627eac780b16dfac9bc6cd04d2677265907d15ba34e49471676d9882b421d441b4acf71ed

Score
10/10
formbookngsratspywarestealertrojan

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

ngs

Decoy

clickavisos.com

superbbeautysecrets.com

edxar.xyz

maximumpotentialfitness.net

exportsninports.com

ijwsm.com

kdawvam.icu

uere.website

pleasantviewgardennj.com

favorflavortexas.com

gilt.pro

nagahama63.com

fractalweed.com

acceptchaos.net

shopshop3.space

lunivers-de-flora.com

astrophiliabrand.com

thegloveexchange.com

bbrazesurgical.com

goswamipad.net

Targets

    • Target

      f0772fc90b67e9d3d2ff1ecbb58397a8bd954f9ea0f811b77e1d5da835b197ba

    • Size

      538KB

    • MD5

      ea20d26564f8916c1d80b7e2ad7bc292

    • SHA1

      644fa741f99f0ab8db5bfecd6913d56cf6b606cb

    • SHA256

      f0772fc90b67e9d3d2ff1ecbb58397a8bd954f9ea0f811b77e1d5da835b197ba

    • SHA512

      7cafe98d8f2c89e875377099288d1c98f1ad7a6d494c21a1a9eec21627eac780b16dfac9bc6cd04d2677265907d15ba34e49471676d9882b421d441b4acf71ed

    Score
    10/10
    formbookngsratspywarestealertrojan

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Formbook Payload

      rat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks