General
-
Target
a8cdc1904d40b6c05f524e28ffd07b17
-
Size
929KB
-
Sample
240227-lehyrsdg9z
-
MD5
a8cdc1904d40b6c05f524e28ffd07b17
-
SHA1
d3d25d3af86dd23455f07db403f834ced7fee739
-
SHA256
7240d57a675a066d7dcb095a520ec2b86c2460080ccfbc759a9d404dec7d3817
-
SHA512
d6c82402cdd3209687aa2fccbef7f89bb54d72ff1d796dd8ed30be054d63c7de5fde81efee33396375dcca33ce20db6c0a0e61372de4738f49b82d2a61f63026
-
SSDEEP
12288:GGoeHoGSP9Q3XR+6yXt2WKK8yp2M1z6H5d89wBuaHHK7zEzKboDxeF:hoeDSP9Q3XRmf8yp9Ad89ws2KboM
Malware Config
Extracted
formbook
4.1
mxwf
orders-cialis.info
auctionorbuy.com
meanmugsamore.com
yachtcrewmark.com
sacredkashilifestudio.net
themintyard.com
bragafoods.com
sierp.com
hausofdeme.com
anthonyjames915.com
bajardepesoencasa.com
marciaroyal.com
earringlifter.com
dsdjfhd9ddksa1as.info
bmzproekt.com
employmentbc.com
ptsdtreatment.space
vrchance.com
cnrongding.com
welovelit.com
Targets
-
-
Target
a8cdc1904d40b6c05f524e28ffd07b17
-
Size
929KB
-
MD5
a8cdc1904d40b6c05f524e28ffd07b17
-
SHA1
d3d25d3af86dd23455f07db403f834ced7fee739
-
SHA256
7240d57a675a066d7dcb095a520ec2b86c2460080ccfbc759a9d404dec7d3817
-
SHA512
d6c82402cdd3209687aa2fccbef7f89bb54d72ff1d796dd8ed30be054d63c7de5fde81efee33396375dcca33ce20db6c0a0e61372de4738f49b82d2a61f63026
-
SSDEEP
12288:GGoeHoGSP9Q3XR+6yXt2WKK8yp2M1z6H5d89wBuaHHK7zEzKboDxeF:hoeDSP9Q3XRmf8yp9Ad89ws2KboM
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook payload
-
Suspicious use of SetThreadContext
-