General
-
Target
7c74f920006998f1ba3f078bc4be6a7c
-
Size
1.3MB
-
Sample
240128-hwfcesdfg2
-
MD5
7c74f920006998f1ba3f078bc4be6a7c
-
SHA1
dead18e8bf8caea113eee0e0b9be559c7b2a29bb
-
SHA256
1e716fc850ee142cf712e56d074ee9b6a3855014612513bb0f447fab5b8c9fc8
-
SHA512
41dc20fb0d914cd50eb6447656c8d902bae0eb648884b4c2d09cb47616c3a2ac0b38965cf804876ab7942cad360a8e22bcc3debdfcd60091ad9c8adb8f8b083d
-
SSDEEP
24576:pKs076DOnfx8Dgyfx8DgnBlWHrA1hdcPc4pKzrlRu/nP7KwDZgLL:H076258Dgy58DgnBlIcrykMX7dZI
Malware Config
Extracted
formbook
4.1
dd2v
jkrqzmeyd.icu
cbluedottvwdshop.com
yhchen.space
premierhealthnwellness.com
szkuyaju.com
harvestmoonloans.net
dadematerial.com
mariaclarahairstudio.com
hwunvy.online
puloutjbmere.com
kossu1989.com
dubbedos.com
ncylis.com
hybrid-sol.com
travelature.com
gracefulcounts.com
66secretgarden.com
eslonyourcell.com
wisersponsorship.com
sepn3.com
Targets
-
-
Target
7c74f920006998f1ba3f078bc4be6a7c
-
Size
1.3MB
-
MD5
7c74f920006998f1ba3f078bc4be6a7c
-
SHA1
dead18e8bf8caea113eee0e0b9be559c7b2a29bb
-
SHA256
1e716fc850ee142cf712e56d074ee9b6a3855014612513bb0f447fab5b8c9fc8
-
SHA512
41dc20fb0d914cd50eb6447656c8d902bae0eb648884b4c2d09cb47616c3a2ac0b38965cf804876ab7942cad360a8e22bcc3debdfcd60091ad9c8adb8f8b083d
-
SSDEEP
24576:pKs076DOnfx8Dgyfx8DgnBlWHrA1hdcPc4pKzrlRu/nP7KwDZgLL:H076258Dgy58DgnBlIcrykMX7dZI
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook payload
-
Suspicious use of SetThreadContext
-