General
-
Target
2728b4a373b5fe9349f007facb3e2194f41b80ec41aa0eb87864bf81e7da0b8e
-
Size
533KB
-
Sample
221124-djtl3ada38
-
MD5
e128315b2d2ffd6e1875157e2f73cf0f
-
SHA1
0c33d30e0fe0deb22bc7bb9ebb149d2fb547210b
-
SHA256
2728b4a373b5fe9349f007facb3e2194f41b80ec41aa0eb87864bf81e7da0b8e
-
SHA512
cb60e487426c7a73e871d8b8f0296c5772d36c02e3fc461409ba739186112f962a3028f8b108d9c8f1789454e6072b2b58454d8b7342c879003b342c060398ce
-
SSDEEP
12288:3AU8NBDoAfPPrhbNzuOhI7iXGbLulrTcsS:wU8wAfn1pN4ulrPS
Malware Config
Extracted
formbook
4.1
sk19
21diasdegratitud.com
kx1993.com
chasergt.com
837news.com
naturagent.co.uk
gatorinsurtech.com
iyaboolashilesblog.africa
jamtanganmurah.online
gguminsa.com
lilliesdrop.com
lenvera.com
link48.co.uk
azinos777.fun
lgcdct.cfd
bg-gobtc.com
livecarrer.uk
cbq4u.com
imalreadygone.com
wabeng.africa
jxmheiyouyuetot.tokyo
Targets
-
-
Target
2728b4a373b5fe9349f007facb3e2194f41b80ec41aa0eb87864bf81e7da0b8e
-
Size
533KB
-
MD5
e128315b2d2ffd6e1875157e2f73cf0f
-
SHA1
0c33d30e0fe0deb22bc7bb9ebb149d2fb547210b
-
SHA256
2728b4a373b5fe9349f007facb3e2194f41b80ec41aa0eb87864bf81e7da0b8e
-
SHA512
cb60e487426c7a73e871d8b8f0296c5772d36c02e3fc461409ba739186112f962a3028f8b108d9c8f1789454e6072b2b58454d8b7342c879003b342c060398ce
-
SSDEEP
12288:3AU8NBDoAfPPrhbNzuOhI7iXGbLulrTcsS:wU8wAfn1pN4ulrPS
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook payload
-
Executes dropped EXE
-
Suspicious use of SetThreadContext
-