General
-
Target
mejor oferta de precio.zip
-
Size
702KB
-
Sample
220914-pjjbwaeabp
-
MD5
5a5fc3a09fd3037fc022e43568fa705f
-
SHA1
bbbc5c9f7ad8f913d67c88563dad85f05b556148
-
SHA256
1c34f2411e9563cc5aac4b8c87bc872adc315fbfac9c8a6226e34ad0e94c20a3
-
SHA512
8181e3859f0e682290adde5296663714bf89e537b6e8cdfcd19d8930c4587046bfec9f1a9b3144eb6e6f6e03fc3b67cfcb4ce73bcf0c252f9d6f3ae04d347492
-
SSDEEP
12288:7t4GpQ0I+lxzZs2ecflZfRcbKv+U9q9vEwaiaNDg3v5tiAcV:7t4GS0XZs2NdZ5cb6+UwFaiaNimV
Malware Config
Extracted
formbook
4.1
ng04
tevimaq.com
easterspecialtystore.com
smartlever.tech
10312.uk
tanjawiharbi.co.uk
471338.com
horusventure.com
empress-care.com
sinrian.com
465951.com
aemsti.com
nxcourier.com
stargatefarms.com
lalyquainvestment.com
dailysportsadvice.com
justlistmoore.com
stoneonroll.online
tatianakolomiets.com
barcodebbm.com
protectorship.world
Targets
-
-
Target
mejor oferta de precio.exe
-
Size
978KB
-
MD5
69aa40391440a87ccb0c3213639998fa
-
SHA1
b671531bd2bcfcd7a293cadfb3ea7195aa266123
-
SHA256
581df810fb540634d65235f4af36def9fc32c43d1e76dcdd5d9a845b8f3e4de5
-
SHA512
522cd67152e57cf7679490ea99ac0f3a9510ba5c0281d4b80d6163835c8c95855e1509358531de0b1e00cfbb806616af4cb5897938bcc9e216c74c2047808cf2
-
SSDEEP
12288:/HhV7uikFg0QxfrGbG3Gcnq7DEw4c0NLeFZzz2Ac1:Phlubg9xDGbEGc2J4c0NUo
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook payload
-
Deletes itself
-
Suspicious use of SetThreadContext
-