General
-
Target
af48c5fdad84f2f85b50a9220a64acfc63ea7ffdc69f59fb658be8cff5388aaa
-
Size
669KB
-
Sample
230507-ggfh7sfe5w
-
MD5
e061a0241303fb38d5a38f9fe67d1ff9
-
SHA1
a46f446c325bff59f14a355d7ca83f39f87b881d
-
SHA256
af48c5fdad84f2f85b50a9220a64acfc63ea7ffdc69f59fb658be8cff5388aaa
-
SHA512
c2ddf503987fdd1b67b8d059de70506e0fab1637fb4fc1357c9e6530f55750575b5b6734fb5950aff37f0f2973f18655264aaf7f23bf7aac38a25c1db6128eb2
-
SSDEEP
12288:I8BF2iNwvHaki82Sc60a1DVaQ6oba3GRT0Nf7ySfF0KXUSts:NH1KvHaFLuDVa7WRT0/fZ
Malware Config
Extracted
formbook
4.1
gtt8
thesuccessbot.com
rittercivil.com
jt1.fun
d365extension.com
quqoxeq.top
visittworiverswi.com
bfprotienda.com
greenhabitsph.com
ladmere.com
clockboutiques.com
minwart.xyz
xinyuejiancai.online
eggsl.com
fetchingcandles.com
skywatiniya.com
hinkley.news
realityonlineenterprises.com
teamcroissant.com
esfera-pv.ch
herdadedosmontesbastos.com
Targets
-
-
Target
af48c5fdad84f2f85b50a9220a64acfc63ea7ffdc69f59fb658be8cff5388aaa
-
Size
669KB
-
MD5
e061a0241303fb38d5a38f9fe67d1ff9
-
SHA1
a46f446c325bff59f14a355d7ca83f39f87b881d
-
SHA256
af48c5fdad84f2f85b50a9220a64acfc63ea7ffdc69f59fb658be8cff5388aaa
-
SHA512
c2ddf503987fdd1b67b8d059de70506e0fab1637fb4fc1357c9e6530f55750575b5b6734fb5950aff37f0f2973f18655264aaf7f23bf7aac38a25c1db6128eb2
-
SSDEEP
12288:I8BF2iNwvHaki82Sc60a1DVaQ6oba3GRT0Nf7ySfF0KXUSts:NH1KvHaFLuDVa7WRT0/fZ
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook payload
-
Suspicious use of SetThreadContext
-