Overview

overview

10

Static

static

1

dridex

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    53495ecf8b97a44f42431f7a069d6d993728788af54c20ce7ece289640c3e1c9
  • Size 357KB
  • Sample221121-r6j8sshg31
  • SHA256 53495ecf8b97a44f42431f7a069d6d993728788af54c20ce7ece289640c3e1c9
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
formbooksk19ratspywarestealertrojan

Malware Config

Extracted

Family

  • formbook

Version

  • 4.1

Campaign

  • sk19

Decoy

  • 21diasdegratitud.com

  • kx1993.com

  • chasergt.com

  • 837news.com

  • naturagent.co.uk

  • gatorinsurtech.com

  • iyaboolashilesblog.africa

  • jamtanganmurah.online

  • gguminsa.com

  • lilliesdrop.com

  • lenvera.com

  • link48.co.uk

  • azinos777.fun

  • lgcdct.cfd

  • bg-gobtc.com

  • livecarrer.uk

  • cbq4u.com

  • imalreadygone.com

  • wabeng.africa

  • jxmheiyouyuetot.tokyo

Targets

    • Target
      53495ecf8b97a44f42431f7a069d6d993728788af54c20ce7ece289640c3e1c9
    • Size 357KB
    • SHA256 53495ecf8b97a44f42431f7a069d6d993728788af54c20ce7ece289640c3e1c9
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    formbooksk19ratspywarestealertrojan

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Formbook payload

      rat

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks