Overview

overview

10

Static

static

10

2040-63-0x...ry.exe

windows7_x64

1

2040-63-0x...ry.exe

windows10-2004_x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    2040-63-0x0000000000400000-0x000000000042F000-memory.dmp
  • Size 188KB
  • Sample220627-qqd66sbdcj
  • SHA256 664b0f30a8715d05ce6428fa8a4121a3c9259783705e6841e61eb0c2d48d4bc3
  • MD5 SHA1 SHA512
Score
10/10
formbookir93rat

Malware Config

Extracted

Family

  • formbook

Version

  • 4.1

Campaign

  • ir93

Decoy

  • dostavka47.store

  • mangguoav.xyz

  • yourhealthstore.life

  • sharpecartoons.com

  • webbankrate.com

  • sublimephotography.online

  • crudepurple.xyz

  • basselibrahim.group

  • peroalkeys.com

  • vntiktokshop.xyz

  • lasarview.com

  • notherdaylope.site

  • hengqijc.com

  • thejamstar.com

  • adityapeen.com

  • bestseeds-21.xyz

  • qaaronautoinsurance.xyz

  • eadservices.online

  • hubei23.com

  • lanenucacontenedor.com

Targets

    • Target
      2040-63-0x0000000000400000-0x000000000042F000-memory.dmp
    • Size 188KB
    • SHA256 664b0f30a8715d05ce6428fa8a4121a3c9259783705e6841e61eb0c2d48d4bc3
    • MD5 SHA1 SHA512
    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks