Overview

overview

10

Static

static

10

decode_138...4f.exe

windows7-x64

1

decode_138...4f.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    decode_138335e60957a76d8318ae543e141ee956bd1d04166e60d1e54db1fb4af0ba4f.exe
  • Size 185KB
  • Sample230123-s3mp7adh98
  • SHA256 8c5606a7010f8a4d5701c1b99fd91af0d1b59bf9bbedb345ba09b449a70fc29f
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
formbookgs12rat

Malware Config

Extracted

Family

  • formbook

Version

  • 4.1

Campaign

  • gs12

Decoy

  • axie-connect.shop

  • limitlsesbook.com

  • kupit-diplom-v-msk.com

  • bvmgmt.net

  • katejewery.com

  • dobuy.club

  • angelacasado.com

  • kozainvestmentgroup.com

  • wellplayedarcade.com

  • 081kai.com

  • hnctsw88.com

  • pilingexpert.com

  • bettertour.online

  • costuraponto.net

  • khione.ch

  • thepathifollow.co.uk

  • 84421274.xyz

  • alko-airtechnology.com

  • gherservices.com

  • dllmbookkeeping.com

Targets

    • Target
      decode_138335e60957a76d8318ae543e141ee956bd1d04166e60d1e54db1fb4af0ba4f.exe
    • Size 185KB
    • SHA256 8c5606a7010f8a4d5701c1b99fd91af0d1b59bf9bbedb345ba09b449a70fc29f
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks