Overview

overview

10

Static

static

3

dridex

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    a4c0d57544223406171313e236825d0156eeb6198b07a3606b5ed6582915ba39
  • Size 676KB
  • Sample231024-a5pnfsbc83
  • SHA256 a4c0d57544223406171313e236825d0156eeb6198b07a3606b5ed6582915ba39
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
formbookoy30ratspywarestealertrojan

Malware Config

Extracted

Family

  • formbook

Version

  • 4.1

Campaign

  • oy30

Decoy

  • rfc234.top

  • danielcavalari.com

  • elperegrinocabo.com

  • aryor.info

  • surelistening.com

  • premium-numero-telf.buzz

  • orlynyml.click

  • tennislovers-ro.com

  • holdmytracker.com

  • eewapay.com

  • jaimesinstallglass.com

  • damactrade.net

  • swapspecialities.com

  • perfumesrffd.today

  • salesfactory.pro

  • supportive-solutions.com

  • naiol.com

  • khoyr.com

  • kalendeargpt44.com

  • web-tech-spb.store

Targets

    • Target
      a4c0d57544223406171313e236825d0156eeb6198b07a3606b5ed6582915ba39
    • Size 676KB
    • SHA256 a4c0d57544223406171313e236825d0156eeb6198b07a3606b5ed6582915ba39
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    formbookoy30ratspywarestealertrojan

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Formbook payload

      rat

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Matrix

Tasks