General
-
Target
e196217570169975afaba0203cc849e5
-
Size
221KB
-
Sample
240327-nwfk3sed6x
-
MD5
e196217570169975afaba0203cc849e5
-
SHA1
c230cbfa709fb8179302c44f4696f7fcd3149dc1
-
SHA256
c2ff62acf746324212f08dc2fcaa6632714f93a2c5f2c6bd36871a9acf88f474
-
SHA512
100f8147e6ce0d496a862b817a2e57f9eda529d4abbbab60a3c1dbd521ccd54db077ba903b3691df2a2ae28397d7397914bcc050bd0939416351df90d3ad9d98
-
SSDEEP
3072:I7/AJNvlRruSvJh9xeyk1EvAty0GTksa0+KZ90lQ+Ytgt4rPZUDKH4sSns:I7MfrlhhbobE3TWKZHgtchUD19n
Malware Config
Extracted
formbook
4.1
m4ts
sverreogjenny.com
hybctd.com
cash4homesutah.com
finaday.com
thecreepniks.com
yumnamc.com
hkk-diary-notes.com
enhancedtech.net
bestmercedesbenzwebsite.com
healingmusicx.com
coegl.com
apinchofearth.com
headsetlinks.com
gxshenghuang.com
skyscrapersaluminium.com
seres.tech
mycrystalcare.com
irgemedia.com
hscecourses.com
ludicrousnutrients.xyz
Targets
-
-
Target
e196217570169975afaba0203cc849e5
-
Size
221KB
-
MD5
e196217570169975afaba0203cc849e5
-
SHA1
c230cbfa709fb8179302c44f4696f7fcd3149dc1
-
SHA256
c2ff62acf746324212f08dc2fcaa6632714f93a2c5f2c6bd36871a9acf88f474
-
SHA512
100f8147e6ce0d496a862b817a2e57f9eda529d4abbbab60a3c1dbd521ccd54db077ba903b3691df2a2ae28397d7397914bcc050bd0939416351df90d3ad9d98
-
SSDEEP
3072:I7/AJNvlRruSvJh9xeyk1EvAty0GTksa0+KZ90lQ+Ytgt4rPZUDKH4sSns:I7MfrlhhbobE3TWKZHgtchUD19n
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook payload
-
Suspicious use of SetThreadContext
-