Overview

overview

10

Static

static

1

6bd52c8274...f0.exe

windows7-x64

10

6bd52c8274...f0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6bd52c8274a35c39740da9b52b4c7ef0.exe

  • Size

    321KB

  • Sample

    221209-yspdxsha41

  • MD5

    6bd52c8274a35c39740da9b52b4c7ef0

  • SHA1

    0754724c922472de6048b5c5595f520f2b93e46e

  • SHA256

    7a0e92402659c86d9da6faf33be3817996718051ea564e34aa43a41606df7be6

  • SHA512

    24e3e05f7db606d1305fab3ab2cb8619cbec90afb81b1a2fafd528581fa04a04c9c3279f0cf6955f8a2e0114acfc70e29be1d10e426b1804c2b4bcb5123c52c7

  • SSDEEP

    6144:9kwv4ysH1jEdoS3dMxsCfld0k1STCESE6pkOgyIuSqYXAHrHa2fI+CUO:jslEliffld0PUkOguSBAHu2W

Score
10/10
formbooklt63ratspywarestealertrojan

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

lt63

Decoy

fortrantelecom.africa

ffafa.buzz

bullybrain.com

ekeisolutions.com

lamiamira.com

noahsark.xyz

beautyby-eve.com

cloudfatory.com

12443.football

hataykultur.online

donqu3.sexy

breakthroughaustralia.com

havengpe.com

cpxlocatup.info

corefourpartners.com

amonefintech.com

thithombo.africa

bassmaty.store

fdshdsr.top

lifesoapsimple.com

Targets

    • Target

      6bd52c8274a35c39740da9b52b4c7ef0.exe

    • Size

      321KB

    • MD5

      6bd52c8274a35c39740da9b52b4c7ef0

    • SHA1

      0754724c922472de6048b5c5595f520f2b93e46e

    • SHA256

      7a0e92402659c86d9da6faf33be3817996718051ea564e34aa43a41606df7be6

    • SHA512

      24e3e05f7db606d1305fab3ab2cb8619cbec90afb81b1a2fafd528581fa04a04c9c3279f0cf6955f8a2e0114acfc70e29be1d10e426b1804c2b4bcb5123c52c7

    • SSDEEP

      6144:9kwv4ysH1jEdoS3dMxsCfld0k1STCESE6pkOgyIuSqYXAHrHa2fI+CUO:jslEliffld0PUkOguSBAHu2W

    Score
    10/10
    formbooklt63ratspywarestealertrojan

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Formbook payload

      rat

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks