Overview

overview

10

Static

static

1

12fb27d7a5...bc.exe

windows7-x64

10

12fb27d7a5...bc.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    12fb27d7a59c168a82317baa0b127b8a826cc98dd108fc37fd022d8a842b06bc.zip
  • Size 547KB
  • Sample240402-l95e9afa34
  • SHA256 f07c207bd9abaee1351920216a0348c82092393d0e6cfd9b69a923b4d45e2fd0
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
formbookvr01ratspywarestealertrojan

Malware Config

Extracted

Family

  • formbook

Version

  • 4.1

Campaign

  • vr01

Decoy

  • eclipsefoodservice.com

  • oregonjobs.co

  • ethicai.pro

  • frontierconnects.co

  • elcaporalburley.com

  • exoticskinco.com

  • topdeals.biz

  • carmensbookstore.com

  • mayorii.com

  • viewhird.com

  • bharatcrimecontrol24news.com

  • sampleshubusa.com

  • molobeverello.com

  • nicholsonflooringservices.com

  • kidscircle.shop

  • 771010.cc

  • poseidoncrm.com

  • liviafiorelli.com

  • flavorfog.online

  • xaqh.info

Targets

    • Target
      12fb27d7a59c168a82317baa0b127b8a826cc98dd108fc37fd022d8a842b06bc.exe
    • Size 566KB
    • SHA256 12fb27d7a59c168a82317baa0b127b8a826cc98dd108fc37fd022d8a842b06bc
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    formbookvr01ratspywarestealertrojan

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Formbook payload

      rat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks