General

  • Target
    8c2ae3eed47dfb8d29b08ea29ebda2e256ea8a0d78945bd069c321c2ee77cfb2
  • Size 1.0MB
  • Sample220701-gdzgxaedck
  • SHA256 8c2ae3eed47dfb8d29b08ea29ebda2e256ea8a0d78945bd069c321c2ee77cfb2
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • formbook

Version
  • 3.9

Campaign
  • w0r

Decoy
  • blyssfulbites.com

  • theterrarium.store

  • chuseokseoulmarket.com

  • drippathletic.com

  • supersking.com

  • pixellmedya.com

  • psartdesign.com

  • lifeinsurancequotesusa.info

  • shopkimble.com

  • care-media.net

  • millhillpagination.com

  • privateblockchain.site

  • csszzfdc.com

  • afglandmaschinen.com

  • littlecrassars.com

  • mysticmiracle.world

  • myomegaservice.com

  • gogoomanews.com

  • tonightaustralia.com

  • hairunsp.com

Targets

    • Target
      8c2ae3eed47dfb8d29b08ea29ebda2e256ea8a0d78945bd069c321c2ee77cfb2
    • Size 1.0MB
    • SHA256 8c2ae3eed47dfb8d29b08ea29ebda2e256ea8a0d78945bd069c321c2ee77cfb2
    • MD5 SHA1 SHA512
    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

    • Formbook Payload

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks