General
-
Target
333f11c6e9126b93d7be34321bf27d170b248d2fb9615ea8bd3d3f63fc202adb
-
Size
357KB
-
Sample
221121-pwyx4aae56
-
MD5
518b7be44238b0a1112086cccfa90eea
-
SHA1
900c555665538dd7eacaf3bcbd3e72a1fed55fd4
-
SHA256
333f11c6e9126b93d7be34321bf27d170b248d2fb9615ea8bd3d3f63fc202adb
-
SHA512
81687b735b1d6d102bcf597394d3167078c51cf755d0e5edf9fdca4ff1bfe5a5999dc2be6b1d1f9bd72556dcf35dbbc4db62a828b828e7d93dc75480411d0527
-
SSDEEP
6144:HEa0eDyf/UBrohN9DYxf+7GwGFOrFTjOFAZo4LBKPYiAIm99ckB1ytTNw4LPE3D:LdNi5NXLBLBehmQTN30
Malware Config
Extracted
formbook
4.1
h3ha
ideas-dulces.store
store1995.store
swuhn.com
ninideal.com
musiqhaus.com
quranchart.com
kszq26.club
lightfx.online
thetickettruth.com
meritloancubk.com
lawnforcement.com
sogeanetwork.com
thedinoexotics.com
kojima-ah.net
gr-myab3z.xyz
platiniuminestor.net
reviewsiske.com
stessil-lifestyle.com
goodqjourney.biz
cirimpianti.com
Targets
-
-
Target
333f11c6e9126b93d7be34321bf27d170b248d2fb9615ea8bd3d3f63fc202adb
-
Size
357KB
-
MD5
518b7be44238b0a1112086cccfa90eea
-
SHA1
900c555665538dd7eacaf3bcbd3e72a1fed55fd4
-
SHA256
333f11c6e9126b93d7be34321bf27d170b248d2fb9615ea8bd3d3f63fc202adb
-
SHA512
81687b735b1d6d102bcf597394d3167078c51cf755d0e5edf9fdca4ff1bfe5a5999dc2be6b1d1f9bd72556dcf35dbbc4db62a828b828e7d93dc75480411d0527
-
SSDEEP
6144:HEa0eDyf/UBrohN9DYxf+7GwGFOrFTjOFAZo4LBKPYiAIm99ckB1ytTNw4LPE3D:LdNi5NXLBLBehmQTN30
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook payload
-
Executes dropped EXE
-
Suspicious use of SetThreadContext
-