General
-
Target
0dca43825c04123072f4b51fcb9f4e16b65b6b74885ff5370b2ddf90502fadc1
-
Size
327KB
-
Sample
220529-tqxv3abdcr
-
MD5
35849f1e5f89af715735afbdeaf4d183
-
SHA1
6f9183a3aefdd41115fb9c9dc86d3d29cd8f8ff7
-
SHA256
0dca43825c04123072f4b51fcb9f4e16b65b6b74885ff5370b2ddf90502fadc1
-
SHA512
03948e28443d945244f5a7b2b1df6ccc46f5dacea352effbbd94f82ff5b161323ad342064b73a208ed917055acdd1775cb36c6eab7adc3349c0d44e97ec2ed58
Malware Config
Extracted
formbook
3.8
hx322
worldloanequity.com
mountainlustvail.com
planteras.com
xptzg.com
baanhuur.com
autotalleresguillermo.seat
foodimall.com
see-shack.com
churchcornerdental.com
bidderzup.com
politie.email
superlloperss.com
betturka.info
camping-stove.site
flowersartisticcreations.com
6hyl.com
strategie-urbane.com
mariethib.com
guoshenghui128.com
multiverse-digital.com
Targets
-
-
Target
0dca43825c04123072f4b51fcb9f4e16b65b6b74885ff5370b2ddf90502fadc1
-
Size
327KB
-
MD5
35849f1e5f89af715735afbdeaf4d183
-
SHA1
6f9183a3aefdd41115fb9c9dc86d3d29cd8f8ff7
-
SHA256
0dca43825c04123072f4b51fcb9f4e16b65b6b74885ff5370b2ddf90502fadc1
-
SHA512
03948e28443d945244f5a7b2b1df6ccc46f5dacea352effbbd94f82ff5b161323ad342064b73a208ed917055acdd1775cb36c6eab7adc3349c0d44e97ec2ed58
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook Payload
-
Suspicious use of SetThreadContext
-