General
-
Target
44b473195e8f495f9e53899badaabf0e164b52ec3cc3d73be3c59cc5c570ccd1
-
Size
442KB
-
Sample
221123-mz5tpsfe35
-
MD5
ac9f7c1ebdf2d688c3f9b7ff82bf4c0a
-
SHA1
b5a0a41c6b3059a93effa972c8f2641192419445
-
SHA256
44b473195e8f495f9e53899badaabf0e164b52ec3cc3d73be3c59cc5c570ccd1
-
SHA512
2b47a0ef4cd5fbc5996dc77a773396146509f7b321ba327190fb16581c33cb0dcaf73b15986b8ff69e0f1b43da97cef84f397d076fd6ba9b35e0b7285485800a
-
SSDEEP
6144:iyEa0sZPLivhZvzkUIRkPQD97qEIb+Qz5W45y/fIXoQGFGtcSsYYL:is4T7wk4VqvKQpEYG5SsLL
Malware Config
Extracted
formbook
4.1
lt63
fortrantelecom.africa
ffafa.buzz
bullybrain.com
ekeisolutions.com
lamiamira.com
noahsark.xyz
beautyby-eve.com
cloudfatory.com
12443.football
hataykultur.online
donqu3.sexy
breakthroughaustralia.com
havengpe.com
cpxlocatup.info
corefourpartners.com
amonefintech.com
thithombo.africa
bassmaty.store
fdshdsr.top
lifesoapsimple.com
Targets
-
-
Target
44b473195e8f495f9e53899badaabf0e164b52ec3cc3d73be3c59cc5c570ccd1
-
Size
442KB
-
MD5
ac9f7c1ebdf2d688c3f9b7ff82bf4c0a
-
SHA1
b5a0a41c6b3059a93effa972c8f2641192419445
-
SHA256
44b473195e8f495f9e53899badaabf0e164b52ec3cc3d73be3c59cc5c570ccd1
-
SHA512
2b47a0ef4cd5fbc5996dc77a773396146509f7b321ba327190fb16581c33cb0dcaf73b15986b8ff69e0f1b43da97cef84f397d076fd6ba9b35e0b7285485800a
-
SSDEEP
6144:iyEa0sZPLivhZvzkUIRkPQD97qEIb+Qz5W45y/fIXoQGFGtcSsYYL:is4T7wk4VqvKQpEYG5SsLL
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook payload
-
Executes dropped EXE
-
Suspicious use of SetThreadContext
-