General
-
Target
220fde8794275a553099945c5a1e929a
-
Size
853KB
-
Sample
231231-a1yqkaafb2
-
MD5
220fde8794275a553099945c5a1e929a
-
SHA1
e1d3cd57e2aaeda5f04ca08396220127d216658f
-
SHA256
9e80f216016104cd0ccc58cb839a2fb6b62552806986ccd381eece1750ef3b3a
-
SHA512
dc2190c9044390f81be868ccd2611ceadd74d04dfef6ba6b1ce3b7dc4547dd4e693ece6b0d5b23000711e9de0c05012bd2f7a88c5fcea15436f29fb37e3bab77
-
SSDEEP
12288:JKr/HK7zXyaANxjyOTCA+WwN+Z8l/Fw706cgVv4kjqHgbn/SylVkicc4gmm4wXYc:JfTlAL3CPWw9/a7t7UATkicRW
Malware Config
Extracted
formbook
4.1
mxwf
orders-cialis.info
auctionorbuy.com
meanmugsamore.com
yachtcrewmark.com
sacredkashilifestudio.net
themintyard.com
bragafoods.com
sierp.com
hausofdeme.com
anthonyjames915.com
bajardepesoencasa.com
marciaroyal.com
earringlifter.com
dsdjfhd9ddksa1as.info
bmzproekt.com
employmentbc.com
ptsdtreatment.space
vrchance.com
cnrongding.com
welovelit.com
Targets
-
-
Target
220fde8794275a553099945c5a1e929a
-
Size
853KB
-
MD5
220fde8794275a553099945c5a1e929a
-
SHA1
e1d3cd57e2aaeda5f04ca08396220127d216658f
-
SHA256
9e80f216016104cd0ccc58cb839a2fb6b62552806986ccd381eece1750ef3b3a
-
SHA512
dc2190c9044390f81be868ccd2611ceadd74d04dfef6ba6b1ce3b7dc4547dd4e693ece6b0d5b23000711e9de0c05012bd2f7a88c5fcea15436f29fb37e3bab77
-
SSDEEP
12288:JKr/HK7zXyaANxjyOTCA+WwN+Z8l/Fw706cgVv4kjqHgbn/SylVkicc4gmm4wXYc:JfTlAL3CPWw9/a7t7UATkicRW
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook payload
-
Suspicious use of SetThreadContext
-