General
-
Target
0c3c3c868a9ee2d1c6c14f9fafd757a1.exe
-
Size
946KB
-
Sample
231231-p2xxzsecf8
-
MD5
0c3c3c868a9ee2d1c6c14f9fafd757a1
-
SHA1
816b112e6027f9d1caec76f78231bd24f6185094
-
SHA256
df6ade5c4e7c4f0e82aca32d744b6f8762d2dd82a98b7bda97e42748d488a661
-
SHA512
e71f53fa6a4b2d0c36b7b9d110988e47c11bee51ed33dfbcb1368adc34f10a8e17112cd286f88da637075dc37e1946151edbebb20012dedbb2487e6f18848f2c
-
SSDEEP
24576:B2wFJMNjRquEyu6nXj4UCmPUUcQfbhvj5CxRT:UwFehkuEGnTVJs9qJ
Malware Config
Extracted
formbook
4.1
vd9n
theunwrappedcollective.com
seckj-ic.com
tyresandover.com
thetrophyworld.com
fonggrconstruction.com
hopiproject.com
sktitle.com
charlotteobscurer.com
qjuhe.com
girlzglitter.com
createmylawn.com
hempcbgpill.com
zzdfdzkj.com
shreehariessential.com
226sm.com
getcupscall.com
neuralviolin.com
sanskaar.life
xn--fhqrm54yyukopc.com
togetherx4fantasy5star.today
Targets
-
-
Target
0c3c3c868a9ee2d1c6c14f9fafd757a1.exe
-
Size
946KB
-
MD5
0c3c3c868a9ee2d1c6c14f9fafd757a1
-
SHA1
816b112e6027f9d1caec76f78231bd24f6185094
-
SHA256
df6ade5c4e7c4f0e82aca32d744b6f8762d2dd82a98b7bda97e42748d488a661
-
SHA512
e71f53fa6a4b2d0c36b7b9d110988e47c11bee51ed33dfbcb1368adc34f10a8e17112cd286f88da637075dc37e1946151edbebb20012dedbb2487e6f18848f2c
-
SSDEEP
24576:B2wFJMNjRquEyu6nXj4UCmPUUcQfbhvj5CxRT:UwFehkuEGnTVJs9qJ
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook payload
-
Suspicious use of SetThreadContext
-