General
-
Target
c1f8453f87478046ab531b8f9b6cc326ed23945f498be57528cb2eb64794127e
-
Size
420KB
-
Sample
221130-ryl3eshe44
-
MD5
8881c8955f0fd9d56453761f4ec30650
-
SHA1
54dbf85c651292408517e3988b9715b977217294
-
SHA256
c1f8453f87478046ab531b8f9b6cc326ed23945f498be57528cb2eb64794127e
-
SHA512
5a33c1590e395523b46fa6ee08319c5e9783e233eed64b92a8f68b2a7b8e321bcfae37bdd9eb23c87bca663f48cbd4e66bf9768471672e680a9e70d1fbc6f774
-
SSDEEP
6144:JwrMUTpmlTBl76qjNLxWC7n8zfCzl/8dhMGGn+p9z:KzklT2qjNLxWC4WzR8a+
Malware Config
Extracted
formbook
3.9
cu
szmsdwl.com
sansurftowntesting.rocks
mixingtheworld.com
jagadhribartanbhandar.com
albanypieshop.com
tago.ltd
lmwellnessgroup.com
xn--vb0bj6jvrexvt.com
180pe.com
1l1threecome.men
visualgraphicarts.science
ecofitlife.com
kearneygeneralcontracting.com
stmarysbandclub.info
jinshucaijing.com
mariahdawson.com
tophoteluniverse.com
yastudent.com
fastrautoservice.com
fslgt.com
Targets
-
-
Target
c1f8453f87478046ab531b8f9b6cc326ed23945f498be57528cb2eb64794127e
-
Size
420KB
-
MD5
8881c8955f0fd9d56453761f4ec30650
-
SHA1
54dbf85c651292408517e3988b9715b977217294
-
SHA256
c1f8453f87478046ab531b8f9b6cc326ed23945f498be57528cb2eb64794127e
-
SHA512
5a33c1590e395523b46fa6ee08319c5e9783e233eed64b92a8f68b2a7b8e321bcfae37bdd9eb23c87bca663f48cbd4e66bf9768471672e680a9e70d1fbc6f774
-
SSDEEP
6144:JwrMUTpmlTBl76qjNLxWC7n8zfCzl/8dhMGGn+p9z:KzklT2qjNLxWC4WzR8a+
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook payload
-
Suspicious use of SetThreadContext
-