Overview

overview

10

Static

static

3

77d1b390dc...a7.exe

windows7-x64

10

77d1b390dc...a7.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    77d1b390dcc1e2517116ae6db3bf7fa7.exe
  • Size 696KB
  • Sample231106-mfdk4sae2z
  • SHA256 ccbdd15e650bb5d3bb0e22c96cfb7d03b38b1fcbd7f7c161c87726fa04df6570
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
formbooko5guratspywarestealertrojan

Malware Config

Extracted

Family

  • formbook

Version

  • 4.1

Campaign

  • o5gu

Decoy

  • jonathanvuportfolio.website

  • moneyboost.net

  • imikecutyou.com

  • toollessassembling.com

  • keoinfra.com

  • mackenziejamesphoto.com

  • zenovaa.com

  • ngmnetwork.com

  • odropoficial.com

  • huyangli.company

  • ganjajuice.info

  • promptmechanic.xyz

  • crispyjoy.com

  • dinevintageshirts.com

  • heyxop.online

  • hopefinancialmarketingph.com

  • weeklyvolcano.app

  • consultoriopmn.com

  • seetheratequote.com

  • ftds77.com

Targets

    • Target
      77d1b390dcc1e2517116ae6db3bf7fa7.exe
    • Size 696KB
    • SHA256 ccbdd15e650bb5d3bb0e22c96cfb7d03b38b1fcbd7f7c161c87726fa04df6570
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    formbooko5guratspywarestealertrojan

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Formbook payload

      rat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks