General

  • Target
    a8b9b23727967d35a0d7361770701e65a060ee3363c099fb8b62128964f30ccf.exe
  • Size 1.0MB
  • Sample240517-e8jntshg52
  • SHA256 a8b9b23727967d35a0d7361770701e65a060ee3363c099fb8b62128964f30ccf
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • formbook

Version
  • 4.1

Campaign
  • se62

Decoy
  • wkb41961shv.com

  • bdsxm.com

  • renovationslandscaping.info

  • qhsmgysm.com

  • fetbody.com

  • injured444.live

  • teensfeel.us

  • zi59wp1h.com

  • dfrtrucking.com

  • 16milevet.com

  • patternzi.com

  • homeinsectcontrolpros.com

  • alcosa-peru.com

  • rmicompletesolutions.co.za

  • nnhealthhk.com

  • fitversus.com

  • hgxaf155.com

  • hizlitakibin.com

  • kjhwbk.top

  • gokarpemed.com

Targets

    • Target
      a8b9b23727967d35a0d7361770701e65a060ee3363c099fb8b62128964f30ccf.exe
    • Size 1.0MB
    • SHA256 a8b9b23727967d35a0d7361770701e65a060ee3363c099fb8b62128964f30ccf
    • MD5 SHA1 SHA512 SSDEEP
    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

    • Formbook payload

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks