General
-
Target
4a5dc061d3675ed107553dae897363d3a60e954a343c4656b89a75ff132221c6
-
Size
272KB
-
Sample
220712-x8jypsfgh9
-
MD5
3c17caa9d17af995510b24b8481a8c49
-
SHA1
0a84e1c55247d791756f7f564bec1d99599282c1
-
SHA256
4a5dc061d3675ed107553dae897363d3a60e954a343c4656b89a75ff132221c6
-
SHA512
a251960ccc5f82834bfaf97a9c3a7d00a7613e5b8cc004ffa7e8e05ed22fbfd01a8cbece925013cf4dfd601c05cdfc5278e03cd064e3f2710ae24770da75a038
Malware Config
Extracted
formbook
3.8
c100
pipegas.site
financemedianews24.com
fucome.net
zjzy2008.com
prettypeonyweddings.com
experientialcentre.com
unitrvl.net
hostracoin.com
empreintevocaletd.com
3564tabardln.info
hello-cheese.com
adserver4m3.com
nashuanhinteriordesign.com
taughtnot.com
manx641.com
loanplanner.net
freelanceunderground.com
rungoplushtoys.com
mariahsmccarthy.com
butterfliesandblueskies.com
Targets
-
-
Target
4a5dc061d3675ed107553dae897363d3a60e954a343c4656b89a75ff132221c6
-
Size
272KB
-
MD5
3c17caa9d17af995510b24b8481a8c49
-
SHA1
0a84e1c55247d791756f7f564bec1d99599282c1
-
SHA256
4a5dc061d3675ed107553dae897363d3a60e954a343c4656b89a75ff132221c6
-
SHA512
a251960ccc5f82834bfaf97a9c3a7d00a7613e5b8cc004ffa7e8e05ed22fbfd01a8cbece925013cf4dfd601c05cdfc5278e03cd064e3f2710ae24770da75a038
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook payload
-
Loads dropped DLL
-
Suspicious use of SetThreadContext
-