General
-
Target
606611606dea5733fe0b4c55d0de55b5
-
Size
1.2MB
-
Sample
240116-vjtqhagbb4
-
MD5
606611606dea5733fe0b4c55d0de55b5
-
SHA1
b85d1d5c95a88e00e0dc18b7aefce1df855030b8
-
SHA256
cc9460866fbf6ae7430f759bc11a90a3536a0032319f20757421a2e08f60faba
-
SHA512
0659b374fddb1e33af03daa4f13dcb5d51c74d47fc0f0547a9f08e702f121f9b5067196a9cb9f320c8b9f7ea07d2bcd3b29cc81a9326a7a0bc66909f1f91c31c
-
SSDEEP
24576:UM5L3geVFYpblhBre/hlt1gT48dn5psHCOR:x5L37yB1K/hlt1gTlHsH5
Malware Config
Extracted
formbook
4.1
mxwf
orders-cialis.info
auctionorbuy.com
meanmugsamore.com
yachtcrewmark.com
sacredkashilifestudio.net
themintyard.com
bragafoods.com
sierp.com
hausofdeme.com
anthonyjames915.com
bajardepesoencasa.com
marciaroyal.com
earringlifter.com
dsdjfhd9ddksa1as.info
bmzproekt.com
employmentbc.com
ptsdtreatment.space
vrchance.com
cnrongding.com
welovelit.com
Targets
-
-
Target
606611606dea5733fe0b4c55d0de55b5
-
Size
1.2MB
-
MD5
606611606dea5733fe0b4c55d0de55b5
-
SHA1
b85d1d5c95a88e00e0dc18b7aefce1df855030b8
-
SHA256
cc9460866fbf6ae7430f759bc11a90a3536a0032319f20757421a2e08f60faba
-
SHA512
0659b374fddb1e33af03daa4f13dcb5d51c74d47fc0f0547a9f08e702f121f9b5067196a9cb9f320c8b9f7ea07d2bcd3b29cc81a9326a7a0bc66909f1f91c31c
-
SSDEEP
24576:UM5L3geVFYpblhBre/hlt1gT48dn5psHCOR:x5L37yB1K/hlt1gTlHsH5
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook payload
-
Suspicious use of SetThreadContext
-