General
-
Target
SecuriteInfo.com.Win64.PWSX-gen.17395.4795.exe
-
Size
552KB
-
Sample
221207-kgf2hsaf36
-
MD5
46333b6ff15c92a0338fb82a3ffda095
-
SHA1
e0c71790f415c5894a89c72f047fc2080e920ee4
-
SHA256
71562f1899bf12998b47d4f245d62c07e152a91ee9191dfaff9a963e3fcd3f7f
-
SHA512
92644ed70c4f28a72399c98ec8c5e72ec4c073e31069a6887dc2a265f6e58c70d7c5f6919a8c1e99f922a939c899e72a4711bc87e914ad053233012e623875a0
-
SSDEEP
12288:GbXKERz+4rqtEmCqfupYcjyf5ITpqRiixvx4bsFslx+haSw8:GtC4utExqf6YX5ITpRixvx4oFslx+hrw
Malware Config
Extracted
formbook
4.1
urde
belleriacortland.com
gxzyykx.com
blocksholding.net
zhangjiyuan.com
tyfinck.com
xn--v9s.club
xn--72c9at8ec1l.com
dorismart.online
nocodeuni.com
hmmprocesos.website
quartile.agency
iansdogname.com
karengillen.com
the-bitindexprime.info
nthanisolutions.com
nakamu.online
sahityanepal.com
sinwinindustry.com
shotblastwearingparts.com
nstsuccess.com
Targets
-
-
Target
SecuriteInfo.com.Win64.PWSX-gen.17395.4795.exe
-
Size
552KB
-
MD5
46333b6ff15c92a0338fb82a3ffda095
-
SHA1
e0c71790f415c5894a89c72f047fc2080e920ee4
-
SHA256
71562f1899bf12998b47d4f245d62c07e152a91ee9191dfaff9a963e3fcd3f7f
-
SHA512
92644ed70c4f28a72399c98ec8c5e72ec4c073e31069a6887dc2a265f6e58c70d7c5f6919a8c1e99f922a939c899e72a4711bc87e914ad053233012e623875a0
-
SSDEEP
12288:GbXKERz+4rqtEmCqfupYcjyf5ITpqRiixvx4bsFslx+haSw8:GtC4utExqf6YX5ITpRixvx4oFslx+hrw
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook payload
-
Suspicious use of SetThreadContext
-