General
-
Target
a1447871448821c618f709b0fe2793d4ebb45d0adb007abf09db5a0a408de953
-
Size
472KB
-
Sample
230129-v2m1nsfe52
-
MD5
992ec0524b6459931751f56832343ea6
-
SHA1
a57e77d0f05594065af5af0a91635ab6d894a1ff
-
SHA256
a1447871448821c618f709b0fe2793d4ebb45d0adb007abf09db5a0a408de953
-
SHA512
ed30c6fa0400bb21a1d31e2b2839457e1223bc75360f6d91d6584fd6d597f85be3acb70b083496d89855def7127c4cedf7c3383e287ce6f431d8b9232f727799
-
SSDEEP
6144:IvpLm+ILKjat7JeFeznG0JECbr9ZQ9QUS:KLfalzntJE+I9S
Malware Config
Extracted
formbook
3.9
sh
world-fireworks.com
fujiyama18.com
mottamail.com
shliangba.com
hatsuratsu-houmon.com
qdqmercados.net
wwwjsgw8.com
bcbsmedicarmarketplace.com
optio.deals
familiasorice.com
harveyfloodmitigation.com
gorelawfirmalpharetta.com
faraweb.net
biolang.net
otiebnight78.com
news3035.soccer
campbellswarehousellc.com
whyxbgjj.com
pixieanddixieadventures.com
xiongqq.com
Targets
-
-
Target
a1447871448821c618f709b0fe2793d4ebb45d0adb007abf09db5a0a408de953
-
Size
472KB
-
MD5
992ec0524b6459931751f56832343ea6
-
SHA1
a57e77d0f05594065af5af0a91635ab6d894a1ff
-
SHA256
a1447871448821c618f709b0fe2793d4ebb45d0adb007abf09db5a0a408de953
-
SHA512
ed30c6fa0400bb21a1d31e2b2839457e1223bc75360f6d91d6584fd6d597f85be3acb70b083496d89855def7127c4cedf7c3383e287ce6f431d8b9232f727799
-
SSDEEP
6144:IvpLm+ILKjat7JeFeznG0JECbr9ZQ9QUS:KLfalzntJE+I9S
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook payload
-
Suspicious use of SetThreadContext
-