Overview

overview

10

Static

static

3

8eb7939848...ed.exe

windows7-x64

10

8eb7939848...ed.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    8eb7939848c171ebb4a2203ad90741bcdc5c7e1feebdd3cd1b7ca4bd4dc307ed.exe
  • Size 806KB
  • Sample230706-n3fjnaaf23
  • SHA256 8eb7939848c171ebb4a2203ad90741bcdc5c7e1feebdd3cd1b7ca4bd4dc307ed
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
formbookee2qratspywarestealertrojan

Malware Config

Extracted

Family

  • formbook

Version

  • 4.1

Campaign

  • ee2q

Decoy

  • uspbs.top

  • proflidi.com

  • fcsawftffcoffical.buzz

  • rustie.link

  • mflol.uk

  • safepalercclaim.buzz

  • tuomamoban.com

  • gxkchp.live

  • kfpu.store

  • bjcxks.com

  • netfiix-account.info

  • flyonex.com

  • faranstechtalk.com

  • littlenuggetproperties.com

  • greatpromo.site

  • bricepacific.com

  • yourhometownappliancerepair.com

  • citrixsettlement.com

  • delivery-broccar.com

  • inncur.space

Targets

    • Target
      8eb7939848c171ebb4a2203ad90741bcdc5c7e1feebdd3cd1b7ca4bd4dc307ed.exe
    • Size 806KB
    • SHA256 8eb7939848c171ebb4a2203ad90741bcdc5c7e1feebdd3cd1b7ca4bd4dc307ed
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    formbookee2qratspywarestealertrojan

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Formbook payload

      rat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks