General
-
Target
2db9ccfd711fa09c59c8fd91b91efd3c
-
Size
317KB
-
Sample
231225-t4n53sgcej
-
MD5
2db9ccfd711fa09c59c8fd91b91efd3c
-
SHA1
49f3b052af5ed306a9d752ccf64d12a2532dd5db
-
SHA256
31b65837c1a54ec6479b6db0119596e1091de6a4159232b0342a4dbe1e0e13f5
-
SHA512
3b058409126799dc4f22e6e21112deb2fbbd2872c500ccd73b8dbfa8a9cf23be85e59e1fd129cf7fd3756019ff0b0fee30cb6277b8013105418198e0f597ecfc
-
SSDEEP
6144:/V4JsIjXsWFs+r/cLCAlcSh6HGEoM7HwtgG7tcL:N4KjMs+Adh6mBM7Ej7tcL
Malware Config
Extracted
formbook
4.1
dd2v
jkrqzmeyd.icu
cbluedottvwdshop.com
yhchen.space
premierhealthnwellness.com
szkuyaju.com
harvestmoonloans.net
dadematerial.com
mariaclarahairstudio.com
hwunvy.online
puloutjbmere.com
kossu1989.com
dubbedos.com
ncylis.com
hybrid-sol.com
travelature.com
gracefulcounts.com
66secretgarden.com
eslonyourcell.com
wisersponsorship.com
sepn3.com
Targets
-
-
Target
2db9ccfd711fa09c59c8fd91b91efd3c
-
Size
317KB
-
MD5
2db9ccfd711fa09c59c8fd91b91efd3c
-
SHA1
49f3b052af5ed306a9d752ccf64d12a2532dd5db
-
SHA256
31b65837c1a54ec6479b6db0119596e1091de6a4159232b0342a4dbe1e0e13f5
-
SHA512
3b058409126799dc4f22e6e21112deb2fbbd2872c500ccd73b8dbfa8a9cf23be85e59e1fd129cf7fd3756019ff0b0fee30cb6277b8013105418198e0f597ecfc
-
SSDEEP
6144:/V4JsIjXsWFs+r/cLCAlcSh6HGEoM7HwtgG7tcL:N4KjMs+Adh6mBM7Ej7tcL
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook payload
-
Suspicious use of SetThreadContext
-