General

  • Target
    f92de0c3ff3c9f94021cce4edef0902c.exe
  • Size 1010KB
  • Sample220915-jktw4scce8
  • SHA256 eee40eae568d6209855e662943eb8c35b8a37ea29f228b7708846506559750af
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • formbook

Version
  • 4.1

Campaign
  • ez03

Decoy
  • rainerbalkan.xyz

  • capitalbrokerspanama.net

  • fodconsultants.info

  • southocpicnics.com

  • jinzhonggz.com

  • apothekamagica.com

  • hiringtechy.com

  • qtinium.biz

  • xinjiansc.com

  • encephalomalacia.net

  • theblueprinttrainingemails.com

  • gbfm0i.biz

  • chiefbenefit4u.com

  • 818everbloom.com

  • anesidoras.com

  • resonaxe.com

  • enterprisetel.online

  • liveunboundedcoaching.net

  • summerpools.net

  • welarti.com

Targets

    • Target
      f92de0c3ff3c9f94021cce4edef0902c.exe
    • Size 1010KB
    • SHA256 eee40eae568d6209855e662943eb8c35b8a37ea29f228b7708846506559750af
    • MD5 SHA1 SHA512 SSDEEP
    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

    • Formbook payload

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks