General
-
Target
f309a5ac633edcbd01916f6bc4cfd10d90982f0443b57e19a5828fd70e83ce10
-
Size
432KB
-
Sample
221213-s6pzqafa56
-
MD5
7624e6fc50195fa8bc4e5bd0da55bc78
-
SHA1
fe95b21578007c76d973c30ec26ed18aef0b5597
-
SHA256
f309a5ac633edcbd01916f6bc4cfd10d90982f0443b57e19a5828fd70e83ce10
-
SHA512
3bb42166a5fb764c02c9344745a70950399cc749b5bb3edf3ac98032c7df370ccecfe509efca1a4c965f0081a4d04e3392cef042b675f0f121b2e16bdcbf422c
-
SSDEEP
6144:ukwkDeTURwgORE8KNAbcA/nVhSw+a6W54LRxW84+lYY0O79QQIGqqu01:PD8owgORE8KkVhSNa6jf4XwC73qj
Malware Config
Extracted
formbook
4.1
h3ha
ideas-dulces.store
store1995.store
swuhn.com
ninideal.com
musiqhaus.com
quranchart.com
kszq26.club
lightfx.online
thetickettruth.com
meritloancubk.com
lawnforcement.com
sogeanetwork.com
thedinoexotics.com
kojima-ah.net
gr-myab3z.xyz
platiniuminestor.net
reviewsiske.com
stessil-lifestyle.com
goodqjourney.biz
cirimpianti.com
Targets
-
-
Target
f309a5ac633edcbd01916f6bc4cfd10d90982f0443b57e19a5828fd70e83ce10
-
Size
432KB
-
MD5
7624e6fc50195fa8bc4e5bd0da55bc78
-
SHA1
fe95b21578007c76d973c30ec26ed18aef0b5597
-
SHA256
f309a5ac633edcbd01916f6bc4cfd10d90982f0443b57e19a5828fd70e83ce10
-
SHA512
3bb42166a5fb764c02c9344745a70950399cc749b5bb3edf3ac98032c7df370ccecfe509efca1a4c965f0081a4d04e3392cef042b675f0f121b2e16bdcbf422c
-
SSDEEP
6144:ukwkDeTURwgORE8KNAbcA/nVhSw+a6W54LRxW84+lYY0O79QQIGqqu01:PD8owgORE8KkVhSNa6jf4XwC73qj
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook payload
-
Executes dropped EXE
-
Suspicious use of SetThreadContext
-