General
-
Target
SecuriteInfo.com.Win32.PWSX-gen.15138.11934.exe
-
Size
574KB
-
Sample
221130-kdj9rsfh3x
-
MD5
86c10e4e706dc6cabdca6a256914618f
-
SHA1
0846b6ded598fda3d551c109f9fc1308a7cf2571
-
SHA256
45fe03f1377e4f9dda19c68d7d29f051e1af299a6c6b0603fe25e79d69422e37
-
SHA512
ac72a540f9aa78fd069f451b92c3c2d7259ef5e95c1c7ce2dab6ff216bd8ab982271a3c749a3716aff75cf0d5b00da20de1c2f38b91cddf050e3c082485abb45
-
SSDEEP
12288:Kq+RYMqK60dw91na41WNd3Fzdi+2XeNHjoO+nX:Kq4YZ0d8l1WnP
Malware Config
Extracted
formbook
4.1
ndgi
vuicotvxrejp3il.xyz
w3fa6.net
sappuno02.com
konstruksirumah.xyz
usalifehealth.com
and1f.xyz
atenmentfstinfdow.beauty
primepipe.net
roundhouseny.com
alexandermcqueen.icu
transporteavalos.com
spankmetaverse.xyz
jhccowholesale.com
bielefeldgebaeudereinigung.com
saintraphaelschool.com
larifaa.online
dejabrew.info
izabelaeraphael.com
granniestoneet.com
greensourceseed.com
Targets
-
-
Target
SecuriteInfo.com.Win32.PWSX-gen.15138.11934.exe
-
Size
574KB
-
MD5
86c10e4e706dc6cabdca6a256914618f
-
SHA1
0846b6ded598fda3d551c109f9fc1308a7cf2571
-
SHA256
45fe03f1377e4f9dda19c68d7d29f051e1af299a6c6b0603fe25e79d69422e37
-
SHA512
ac72a540f9aa78fd069f451b92c3c2d7259ef5e95c1c7ce2dab6ff216bd8ab982271a3c749a3716aff75cf0d5b00da20de1c2f38b91cddf050e3c082485abb45
-
SSDEEP
12288:Kq+RYMqK60dw91na41WNd3Fzdi+2XeNHjoO+nX:Kq4YZ0d8l1WnP
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook payload
-
Suspicious use of SetThreadContext
-