General
-
Target
7911936178.zip
-
Size
620KB
-
Sample
220826-zy9sgsafa4
-
MD5
dd81cb6acc58a1f9ffa8bbeb084319a2
-
SHA1
59191ac333c0ab1a7d3f1cc8340b9951d751b07d
-
SHA256
ba6b9518c8c5520a830578a1b2d66535b879933ceec43e88d786ef6822aaf85a
-
SHA512
ce2feef18799d00971349d0a0cb1d4595e32df8ee95952b92e0b3380ed2199483e92dd7ef6e549f93845e77e892a7eb2a6d43d9122d16cfcd4027a1a1b900d02
-
SSDEEP
12288:BoMP8UvE8AwvVCZ7T476hZ36g5nEarS4ac2ap69Gk1otKzNI1fBr:BoLwCm7mZ3Z/acr69v1ouNIj
Malware Config
Extracted
formbook
4.1
p94a
wishgrove.com
parqueveiculos.com
spiderwebs.online
chulkanadham.com
cdtuan.net
zxazm.com
payment6528832.xyz
fengtaiol.com
bffsmovie.com
aliceseagerfitness.com
garisluruskonsulindo.website
analytical-gutter.net
ahcq8.com
fenyoga.com
ecleptic.cat
conjurecrafts.com
aquaway.date
apenpokkenschoonmaakbedrijf.com
zgramr.top
boweknives.site
Targets
-
-
Target
0cbaefa900f08c2844a65456c26385770ba32ecfdfe4ad1e774aa63538b5d2b1
-
Size
838KB
-
MD5
103834076a9658b0ba07bf9c9232adf1
-
SHA1
15f34d001fb89348ec3f81b7e8586c6145f019e9
-
SHA256
0cbaefa900f08c2844a65456c26385770ba32ecfdfe4ad1e774aa63538b5d2b1
-
SHA512
ba7452f4937c72f4ef4758d987905c9e45f092ce454857c55b9946768571505c8e42668c7d115169f75d5b82fadc15b08921efbffa1c3566039081760714b306
-
SSDEEP
12288:qdoKggb2iNdvpc++AWUsci/n0K947D/G91k0MuXAzHBaUe0DkgYrRM2TgN/0s:6oKgK1XpSRUUjK/u7Mua27gi
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook payload
-
Suspicious use of SetThreadContext
-