Overview

overview

10

Static

static

b3c05919b9...9b.exe

windows7_x64

10

b3c05919b9...9b.exe

windows10-2004_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    b3c05919b9c5211ba45fb127e9ad619b.exe
  • Size 516KB
  • Sample220629-tmx2nacfb6
  • SHA256 18d20fd91591afb27d3f5fc50ce02f574e8dd871cd94572f4aae29928e55646e
  • MD5 SHA1 SHA512
Score
10/10
formbookj1a4ratspywarestealertrojan

Malware Config

Extracted

Family

  • formbook

Version

  • 4.1

Campaign

  • j1a4

Decoy

  • wwwontgiveupsigns.com

  • serviceproweb.com

  • ace-101.com

  • cfxzp.com

  • bicycycling.com

  • localstlapple.com

  • jslwoodworks.com

  • oropendolashop.com

  • westfield-hk.com

  • luyando.net

  • xn--72c5ab3bfb6a2q6a.com

  • rccgdominionparish.com

  • homemromantico.com

  • 3jong.com

  • activation-eyevvear.com

  • liskcreations.com

  • euritandre.com

  • mohey--r.site

  • cpattt4.top

  • reklamadinahersey.com

Targets

    • Target
      b3c05919b9c5211ba45fb127e9ad619b.exe
    • Size 516KB
    • SHA256 18d20fd91591afb27d3f5fc50ce02f574e8dd871cd94572f4aae29928e55646e
    • MD5 SHA1 SHA512
    Score
    10/10
    formbookj1a4ratspywarestealertrojan

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Formbook Payload

      rat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks