Overview

overview

10

Static

static

1

daf8173675...85.exe

windows7-x64

10

daf8173675...85.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    daf8173675eb174a782edcbbf805b285.exe
  • Size 698KB
  • Sample230419-vctrxsea3z
  • SHA256 3b86e5743a7a35e6c3e1dc7cb1a844299e7b1f9eeea5bb7e51ca0de52b808803
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
formbooks17bratspywarestealertrojan

Malware Config

Extracted

Family

  • formbook

Version

  • 4.1

Campaign

  • s17b

Decoy

  • adriannavasquez.com

  • ticketstolisbon.com

  • hygrostar.com

  • dcairandheat.com

  • gamerviet.com

  • cjdao.net

  • informationdata65319.com

  • ethdefi.live

  • 0241d.com

  • bestwoodtoy.com

  • bookingmello.com

  • hjd3c5.com

  • 1eisdhiookd.xyz

  • urbanfarmingdynamics.africa

  • graphicsxperts.com

  • ebndeoo.store

  • chenzhenstorea.club

  • brain-life-imaging.info

  • containsmilk.com

  • ebaepay.click

Targets

    • Target
      daf8173675eb174a782edcbbf805b285.exe
    • Size 698KB
    • SHA256 3b86e5743a7a35e6c3e1dc7cb1a844299e7b1f9eeea5bb7e51ca0de52b808803
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    formbooks17bratspywarestealertrojan

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Formbook payload

      rat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks