General
-
Target
57c7197e5a65dfb3079b47e524fd148c.exe
-
Size
650KB
-
Sample
230622-mnsp1adh68
-
MD5
57c7197e5a65dfb3079b47e524fd148c
-
SHA1
433fb441b04980ba8cfa87e5b5e978c1ea2866e1
-
SHA256
2834c7716f19153625258be49e586dc0d81be392f9bedeae1ddd740469287c44
-
SHA512
01592b6bbd3adae1a24d47a58331e5bd7089aad78f73b04d2844677ef0ccc69f0d7de500a7c4c1af9bc613548c8f44f2885d3778cd802482583ad75b659f1785
-
SSDEEP
12288:vpdvDhH62MmgPFsOnb89E/pnrKLwqvcYCh8OESIWS6qgJWVYtE2:xdvDcAwY99wVXhzEgU
Malware Config
Extracted
formbook
4.1
xchu
zcartoons.com
castilloshowroom.com
3bmmdtod.life
misaxoxo.com
nadiya.online
sykkbup29.xyz
triciaaprimrosevp.com
newleter.com
ptzslk.xyz
lightbulbfestival.com
texaslandline.com
ideeintemporelle.com
girljustdoitpodcast.com
medimediamarketing.com
bunk7outfitters.com
charlievgrfminnick.click
lifestyleinthehome.com
atfbestsale.online
frontdoorproperties.co.uk
grandpaswag2024.info
Targets
-
-
Target
57c7197e5a65dfb3079b47e524fd148c.exe
-
Size
650KB
-
MD5
57c7197e5a65dfb3079b47e524fd148c
-
SHA1
433fb441b04980ba8cfa87e5b5e978c1ea2866e1
-
SHA256
2834c7716f19153625258be49e586dc0d81be392f9bedeae1ddd740469287c44
-
SHA512
01592b6bbd3adae1a24d47a58331e5bd7089aad78f73b04d2844677ef0ccc69f0d7de500a7c4c1af9bc613548c8f44f2885d3778cd802482583ad75b659f1785
-
SSDEEP
12288:vpdvDhH62MmgPFsOnb89E/pnrKLwqvcYCh8OESIWS6qgJWVYtE2:xdvDcAwY99wVXhzEgU
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook payload
-
Suspicious use of SetThreadContext
-