Overview

overview

10

Static

static

3

bc278e61af...c3.exe

windows7-x64

10

bc278e61af...c3.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    bc278e61afe6b7ec94d465d01bb603c3.exe
  • Size 657KB
  • Sample230428-m9qsjade86
  • SHA256 9d1779f9a627d5d1cd19c2a1f74f71eddb92cc11d8757d4ea3a2e7b315f4186d
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
formbooke8fgratspywarestealertrojan

Malware Config

Extracted

Family

  • formbook

Version

  • 4.1

Campaign

  • e8fg

Decoy

  • rmaex.xyz

  • thegreenambition.com

  • ifmcustomerevents.com

  • agencewebimage.com

  • w0a00dbe.buzz

  • shopbequynhff.com

  • webpetarung.online

  • girlgonecyber.com

  • lexoutwest.com

  • gramshilpartandcraft.com

  • kemeioficial.com

  • track-race-package.com

  • shop-domanopro.com

  • bohanshow.com

  • ateliermedispa.com

  • paragonhonda-ny.com

  • calzadosnova.com

  • thephoenixoneproject.com

  • pl66380.com

  • nightowlmarketinggroup.com

Targets

    • Target
      bc278e61afe6b7ec94d465d01bb603c3.exe
    • Size 657KB
    • SHA256 9d1779f9a627d5d1cd19c2a1f74f71eddb92cc11d8757d4ea3a2e7b315f4186d
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    formbooke8fgratspywarestealertrojan

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Formbook payload

      rat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks