General
-
Target
new urgent order.com.exe
-
Size
1010KB
-
Sample
221010-rdtlrsccbr
-
MD5
0a999e260cf119944525a04aacdd4bdf
-
SHA1
34a60786dc0cbe3eb8f3277fc34e8d92c5b15e7a
-
SHA256
25708a13d2e645b80c530c5a5fae43e01129d9f2b7623339e59d52383bd5192f
-
SHA512
a7dedc05b6f31683625ddcdd25b6e3b53f146d2975e0eaa318cb3801af0190564c5befe0e6e5fe5ff37104464a80a2da1ca326d60f677b39d268ddecbf285cf6
-
SSDEEP
12288:Qg3Aw2iNmv/aJ1Kf2CdhNPDjmIBi+60Gtnx0rqg753jkPYu5bsQONDiPu:n3Aw1F7Kf2mnDjzBi+60GtnxXS52YtQ
Malware Config
Extracted
formbook
4.1
p94a
wishgrove.com
parqueveiculos.com
spiderwebs.online
chulkanadham.com
cdtuan.net
zxazm.com
payment6528832.xyz
fengtaiol.com
bffsmovie.com
aliceseagerfitness.com
garisluruskonsulindo.website
analytical-gutter.net
ahcq8.com
fenyoga.com
ecleptic.cat
conjurecrafts.com
aquaway.date
apenpokkenschoonmaakbedrijf.com
zgramr.top
boweknives.site
Targets
-
-
Target
new urgent order.com.exe
-
Size
1010KB
-
MD5
0a999e260cf119944525a04aacdd4bdf
-
SHA1
34a60786dc0cbe3eb8f3277fc34e8d92c5b15e7a
-
SHA256
25708a13d2e645b80c530c5a5fae43e01129d9f2b7623339e59d52383bd5192f
-
SHA512
a7dedc05b6f31683625ddcdd25b6e3b53f146d2975e0eaa318cb3801af0190564c5befe0e6e5fe5ff37104464a80a2da1ca326d60f677b39d268ddecbf285cf6
-
SSDEEP
12288:Qg3Aw2iNmv/aJ1Kf2CdhNPDjmIBi+60Gtnx0rqg753jkPYu5bsQONDiPu:n3Aw1F7Kf2mnDjzBi+60GtnxXS52YtQ
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook payload
-
Suspicious use of SetThreadContext
-