General
-
Target
b304326e0642b2b536ca8dccd0ec9386
-
Size
854KB
-
Sample
240304-yypxmsda46
-
MD5
b304326e0642b2b536ca8dccd0ec9386
-
SHA1
666addb5e0b20131c51797afcb6c1a26a0076f39
-
SHA256
2fceb2ab5c13e25144d038cc052e7ee694cef90b548af35185b8cb9500718548
-
SHA512
58d954d50ace7ec7574b69458192ddd8306d8e83ef34ab34968bcc9636ed89b7493ee74a38e5818c90025929743ef34559706672ab46c9fd50cea046912ec6d8
-
SSDEEP
12288:ZgZnqR/HK7z5sHRonAgmbyetDX2tGm4zXHrztodK7TAywA7omHK7iFEQ8BNvuJ6h:i9LAgmbyeYtGf/xsywAv
Malware Config
Extracted
formbook
4.1
kzk9
tianconghuo.club
1996-page.com
ourtownmax.net
conservativetreehose.com
synth.repair
donnachicacreperia.com
tentfull.com
weapp.download
surfersink.com
gattlebusinessservices.com
sebastian249.com
anhphuc.company
betternatureproducts.net
defroplate.com
seattlesquidsquad.com
polarjob.com
lendingadvantage.com
angelsondope.com
goportjitney.com
tiendagrupojagr.com
Targets
-
-
Target
b304326e0642b2b536ca8dccd0ec9386
-
Size
854KB
-
MD5
b304326e0642b2b536ca8dccd0ec9386
-
SHA1
666addb5e0b20131c51797afcb6c1a26a0076f39
-
SHA256
2fceb2ab5c13e25144d038cc052e7ee694cef90b548af35185b8cb9500718548
-
SHA512
58d954d50ace7ec7574b69458192ddd8306d8e83ef34ab34968bcc9636ed89b7493ee74a38e5818c90025929743ef34559706672ab46c9fd50cea046912ec6d8
-
SSDEEP
12288:ZgZnqR/HK7z5sHRonAgmbyetDX2tGm4zXHrztodK7TAywA7omHK7iFEQ8BNvuJ6h:i9LAgmbyeYtGf/xsywAv
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook payload
-
Suspicious use of SetThreadContext
-