General
-
Target
ec50585dab84864994cf600d29f959c3a510b149b6c8a379e077376d6ceed431.exe
-
Size
832KB
-
Sample
221010-l5mpmsbfbk
-
MD5
b801c9cfb9c362113591d0c7510be488
-
SHA1
7ba12b0c2373a7420043ab9ea207ffe43ab223d2
-
SHA256
ec50585dab84864994cf600d29f959c3a510b149b6c8a379e077376d6ceed431
-
SHA512
cc9a2b47345c2cc97b386005a575a18cf68dc4362a044c957dc833957c8a6e80ebe1655812a69635dd969edd7412484cba0107e5d0a9fae808f6bc6f91d40a79
-
SSDEEP
12288:nfz4Stx/uXgbvbQaglEYlHkDwyfqUUcwIlR/HKsAqxiS25cdk:nfXtx/EgbbXatpGpiUUulFq7qwwk
Malware Config
Extracted
formbook
4.1
p94a
wishgrove.com
parqueveiculos.com
spiderwebs.online
chulkanadham.com
cdtuan.net
zxazm.com
payment6528832.xyz
fengtaiol.com
bffsmovie.com
aliceseagerfitness.com
garisluruskonsulindo.website
analytical-gutter.net
ahcq8.com
fenyoga.com
ecleptic.cat
conjurecrafts.com
aquaway.date
apenpokkenschoonmaakbedrijf.com
zgramr.top
boweknives.site
Targets
-
-
Target
ec50585dab84864994cf600d29f959c3a510b149b6c8a379e077376d6ceed431.exe
-
Size
832KB
-
MD5
b801c9cfb9c362113591d0c7510be488
-
SHA1
7ba12b0c2373a7420043ab9ea207ffe43ab223d2
-
SHA256
ec50585dab84864994cf600d29f959c3a510b149b6c8a379e077376d6ceed431
-
SHA512
cc9a2b47345c2cc97b386005a575a18cf68dc4362a044c957dc833957c8a6e80ebe1655812a69635dd969edd7412484cba0107e5d0a9fae808f6bc6f91d40a79
-
SSDEEP
12288:nfz4Stx/uXgbvbQaglEYlHkDwyfqUUcwIlR/HKsAqxiS25cdk:nfXtx/EgbbXatpGpiUUulFq7qwwk
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook payload
-
Suspicious use of SetThreadContext
-