General
-
Target
05ab9004968d1a9d4187dac4e629ef8ea777fb66c4d009ad411f2f945f2a53f0
-
Size
463KB
-
Sample
220527-vpmjdahhcj
-
MD5
9841dbf9dfa221a4e050db3e92689bc9
-
SHA1
6948e9499fc0bfa41a72107b1fc58b15a9e40f63
-
SHA256
05ab9004968d1a9d4187dac4e629ef8ea777fb66c4d009ad411f2f945f2a53f0
-
SHA512
c1791b418fbc55d00006f01a9b1dfba21dfed3fc4bb5b25f05a55c02e4c3af435a284979f186ec095bfc4e1d2717c0686d2e9b7a938be6ecf567cfd3e1517298
Malware Config
Extracted
formbook
3.8
h35
maraudersinc.com
liebianwangluo.com
visit-australia.info
machiyane-kasukabe.com
hafizclub.com
merkburn.net
favoritetraffic2updating.win
adrian-oeser.net
nkshopdomaincpplt234.info
imperiodofutebol.com
welometocaloundra.com
thehealthypose.com
squalloptna.com
bobknowsbest.com
damgproperties.com
wastemastershire.co.uk
swacballet.com
japanbreakingnews.com
bjufaa.info
aryakuza.com
Targets
-
-
Target
05ab9004968d1a9d4187dac4e629ef8ea777fb66c4d009ad411f2f945f2a53f0
-
Size
463KB
-
MD5
9841dbf9dfa221a4e050db3e92689bc9
-
SHA1
6948e9499fc0bfa41a72107b1fc58b15a9e40f63
-
SHA256
05ab9004968d1a9d4187dac4e629ef8ea777fb66c4d009ad411f2f945f2a53f0
-
SHA512
c1791b418fbc55d00006f01a9b1dfba21dfed3fc4bb5b25f05a55c02e4c3af435a284979f186ec095bfc4e1d2717c0686d2e9b7a938be6ecf567cfd3e1517298
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook Payload
-
Suspicious use of SetThreadContext
-