General

  • Target
    Payment.exe
  • Size 714KB
  • Sample240706-akgr4ssdrd
  • SHA256 2a899ee00e6f2b09c002a3dc271e3ec7d15a7c98b8a3d9500f96dfd7fe941f4a
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • formbook

Version
  • 4.1

Campaign
  • na10

Decoy
  • tetheus.com

  • ventlikeyoumeanit.com

  • tintbliss.com

  • rinabet357.com

  • sapphireboutiqueusa.com

  • abc8bet6.com

  • xzcn3i7jb13cqei.buzz

  • pinktravelsnagpur.com

  • bt365038.com

  • rtpbossujang303.shop

  • osthirmaker.com

  • thelonelyteacup.com

  • rlc2019.com

  • couverture-charpente.com

  • productivagc.com

  • defendercarcare.com

  • abcentixdigital.com

  • petco.ltd

  • oypivh.top

  • micro.guru

Targets

    • Target
      Payment.exe
    • Size 714KB
    • SHA256 2a899ee00e6f2b09c002a3dc271e3ec7d15a7c98b8a3d9500f96dfd7fe941f4a
    • MD5 SHA1 SHA512 SSDEEP
    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

    • Formbook payload

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks