Overview

overview

10

Static

static

3

581a4f34ba...21.exe

windows7-x64

10

581a4f34ba...21.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    581a4f34ba7db66e569d2d9135f8e73e089ed3bc4654c2e5099baf6854166021.exe
  • Size 773KB
  • Sample230705-qjcprsce73
  • SHA256 581a4f34ba7db66e569d2d9135f8e73e089ed3bc4654c2e5099baf6854166021
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
formbookks01ratspywarestealertrojan

Malware Config

Extracted

Family

  • formbook

Version

  • 4.1

Campaign

  • ks01

Decoy

  • glchqx.com

  • acpwatertreatment.co.uk

  • hannahschepmann.com

  • cvcv49.top

  • crazy-for-promotion.online

  • goldstreamacademy.africa

  • erasure.monster

  • judiangka.boats

  • fli.group

  • 94ebuy.com

  • enjoyvet.com

  • box618.shop

  • formdr.dev

  • rivierabathrooms.co.uk

  • drawntocolour.com

  • digitalworldobserver.com

  • lonelinessindex.com

  • coachifyfunnels.com

  • abeloewen.com

  • bahujan.store

Targets

    • Target
      581a4f34ba7db66e569d2d9135f8e73e089ed3bc4654c2e5099baf6854166021.exe
    • Size 773KB
    • SHA256 581a4f34ba7db66e569d2d9135f8e73e089ed3bc4654c2e5099baf6854166021
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    formbookks01ratspywarestealertrojan

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Formbook payload

      rat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks