General
-
Target
SecuriteInfo.com.Variant.Tedy.195528.26583.7219
-
Size
779KB
-
Sample
220831-r2n17affdp
-
MD5
6814c31053c4c98b5efe0d79404d2264
-
SHA1
e3886726be28b9c4308ee91e6189226ff9d2050d
-
SHA256
cef2243da2472b9536dcd7b34483b8fe2a6557a0705f58cc952d9511571ae4e7
-
SHA512
2efe68b82415789672c8590ce4bae5010161ef8d037300b7c7102dea27786bcb0488fcc8d61868d91277930f677cd7f7627976c5386700135ed41bf2a667dad2
-
SSDEEP
12288:DwAukUIHH6bw5qjBKF75eJG1eLCZTItYWfO4sUUAuzUiUc8PJii7X+/iep3k:AzwXZ5f1eCef8UUAuleJzLeiepU
Malware Config
Extracted
formbook
4.1
p94a
wishgrove.com
parqueveiculos.com
spiderwebs.online
chulkanadham.com
cdtuan.net
zxazm.com
payment6528832.xyz
fengtaiol.com
bffsmovie.com
aliceseagerfitness.com
garisluruskonsulindo.website
analytical-gutter.net
ahcq8.com
fenyoga.com
ecleptic.cat
conjurecrafts.com
aquaway.date
apenpokkenschoonmaakbedrijf.com
zgramr.top
boweknives.site
Targets
-
-
Target
SecuriteInfo.com.Variant.Tedy.195528.26583.7219
-
Size
779KB
-
MD5
6814c31053c4c98b5efe0d79404d2264
-
SHA1
e3886726be28b9c4308ee91e6189226ff9d2050d
-
SHA256
cef2243da2472b9536dcd7b34483b8fe2a6557a0705f58cc952d9511571ae4e7
-
SHA512
2efe68b82415789672c8590ce4bae5010161ef8d037300b7c7102dea27786bcb0488fcc8d61868d91277930f677cd7f7627976c5386700135ed41bf2a667dad2
-
SSDEEP
12288:DwAukUIHH6bw5qjBKF75eJG1eLCZTItYWfO4sUUAuzUiUc8PJii7X+/iep3k:AzwXZ5f1eCef8UUAuleJzLeiepU
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook payload
-
Suspicious use of SetThreadContext
-