Overview

overview

10

Static

static

3

fe33711a4b...18.exe

windows7-x64

10

fe33711a4b...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    fe33711a4b55ee419481ef8e2ae68d7c_JaffaCakes118
  • Size 857KB
  • Sample240421-crd1xagg7t
  • SHA256 41426800f6abacfe11baaa98f532e48b152971d90958016a943e8e0fb7967b9e
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
formbooki6sjratspywarestealertrojan

Malware Config

Extracted

Family

  • formbook

Version

  • 4.1

Campaign

  • i6sj

Decoy

  • earn1kdaily.com

  • inspirestudiopro.com

  • dirtiblvk.com

  • humanbehaviourschool.com

  • tsftextiles.com

  • viveroeljardindelaabuela.com

  • surreykeys.com

  • sf790.com

  • evergreenmortuary-cemetary.com

  • pspbizhi.com

  • ironwoodpianostudios.com

  • outrageouslywise.com

  • blacklivesmatterisajoke.com

  • reignauto.com

  • azw3.net

  • nondapack.com

  • dressahaulicboutique.com

  • pierrockellelive.com

  • theleagueofgeeks.com

  • matthiaswalpen.com

Targets

    • Target
      fe33711a4b55ee419481ef8e2ae68d7c_JaffaCakes118
    • Size 857KB
    • SHA256 41426800f6abacfe11baaa98f532e48b152971d90958016a943e8e0fb7967b9e
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    formbooki6sjratspywarestealertrojan

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Formbook payload

      rat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks