Overview

overview

10

Static

static

1

6c57d95418...dd.exe

windows7-x64

10

6c57d95418...dd.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6c57d954185304fcdf601ae96c7683dd.exe

  • Size

    312KB

  • Sample

    221122-lnrl9scd71

  • MD5

    6c57d954185304fcdf601ae96c7683dd

  • SHA1

    3293e44a9cd39439a476d35494e92735e823e53d

  • SHA256

    e2175069548a88b8d2eb7f6fd0dcb8760317025817cb6d2c8b40a3ff71972a6f

  • SHA512

    e00533802b7fa9e1dc0808bfadee7a2df24d387989c03ed417ea67bacebfed29ba93ac669204139f72f151606dc1d0bf0bf7f8cbdb08edc49fcdab8cd318f86d

  • SSDEEP

    6144:dEa0qixrykQZaW+iVoY0rq08OPGdXgBGLNqz7r+e0cQ/Nj/2oBjv:h0rykC+iVoHPmXgMgz7gj+o1

Score
10/10
formbookh3haratspywarestealertrojan

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

h3ha

Decoy

ideas-dulces.store

store1995.store

swuhn.com

ninideal.com

musiqhaus.com

quranchart.com

kszq26.club

lightfx.online

thetickettruth.com

meritloancubk.com

lawnforcement.com

sogeanetwork.com

thedinoexotics.com

kojima-ah.net

gr-myab3z.xyz

platiniuminestor.net

reviewsiske.com

stessil-lifestyle.com

goodqjourney.biz

cirimpianti.com

Targets

    • Target

      6c57d954185304fcdf601ae96c7683dd.exe

    • Size

      312KB

    • MD5

      6c57d954185304fcdf601ae96c7683dd

    • SHA1

      3293e44a9cd39439a476d35494e92735e823e53d

    • SHA256

      e2175069548a88b8d2eb7f6fd0dcb8760317025817cb6d2c8b40a3ff71972a6f

    • SHA512

      e00533802b7fa9e1dc0808bfadee7a2df24d387989c03ed417ea67bacebfed29ba93ac669204139f72f151606dc1d0bf0bf7f8cbdb08edc49fcdab8cd318f86d

    • SSDEEP

      6144:dEa0qixrykQZaW+iVoY0rq08OPGdXgBGLNqz7r+e0cQ/Nj/2oBjv:h0rykC+iVoHPmXgMgz7gj+o1

    Score
    10/10
    formbookh3haratspywarestealertrojan

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Formbook payload

      rat

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks