General
-
Target
f2a0159fafd3bdbe6b457f8f724e142c8cfd9cb0eb02b508729cc7e3c42cf593
-
Size
812KB
-
Sample
220919-jjsyesagbj
-
MD5
909d921710d0a5bc4ddfacb0ced137bf
-
SHA1
fdea869c122579b91b37eb9c30208645191375b1
-
SHA256
f2a0159fafd3bdbe6b457f8f724e142c8cfd9cb0eb02b508729cc7e3c42cf593
-
SHA512
afc37126846a38d7118fbcc44358f4b9d45a3ce5ad4fa4b1ef7ae65660b05cf0a3ca7f39a2da09eca5ac55eccdf09ea016ed076ee66ead0232b49ce0a94b68c2
-
SSDEEP
12288:9RWl0W42kA3TOGU2ybvNTjhFG8KBvqKT8B8IHhp2TBS:iw2kQ6GTaFGDBvBCLBpAS
Malware Config
Extracted
formbook
4.1
sde7
lolfilmfestival.com
pousdaobosque.com
tangierfilm.com
valuedassist.com
qcrluxuryrentals.com
poc4cloudx.com
irizh.art
flowsever.com
serios-lifestyle.com
abc-diomain.com
bmwoemwarehouse.com
vivelamoda.com
thesycorax.online
goodjob129.com
hudyeanamaze.com
pabcp.com
millennialworkouts.com
gpcr-compound-library.com
rotyupin.xyz
hnkcsm.com
Targets
-
-
Target
f2a0159fafd3bdbe6b457f8f724e142c8cfd9cb0eb02b508729cc7e3c42cf593
-
Size
812KB
-
MD5
909d921710d0a5bc4ddfacb0ced137bf
-
SHA1
fdea869c122579b91b37eb9c30208645191375b1
-
SHA256
f2a0159fafd3bdbe6b457f8f724e142c8cfd9cb0eb02b508729cc7e3c42cf593
-
SHA512
afc37126846a38d7118fbcc44358f4b9d45a3ce5ad4fa4b1ef7ae65660b05cf0a3ca7f39a2da09eca5ac55eccdf09ea016ed076ee66ead0232b49ce0a94b68c2
-
SSDEEP
12288:9RWl0W42kA3TOGU2ybvNTjhFG8KBvqKT8B8IHhp2TBS:iw2kQ6GTaFGDBvBCLBpAS
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook payload
-
Suspicious use of SetThreadContext
-