Overview

overview

10

Static

static

3

ff6bc7743c...89.exe

windows7-x64

10

ff6bc7743c...89.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    1c9d2e6d7686b9dd16a0a4f219c42e7a.bin
  • Size 526KB
  • Sample240709-bheems1blb
  • SHA256 afa2ef040d8d4735e27da7bd38ca8aaed25e4bd8640a7f7f49db810347578bf6
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
formbookna10ratspywarestealertrojan

Malware Config

Extracted

Family

  • formbook

Version

  • 4.1

Campaign

  • na10

Decoy

  • tetheus.com

  • ventlikeyoumeanit.com

  • tintbliss.com

  • rinabet357.com

  • sapphireboutiqueusa.com

  • abc8bet6.com

  • xzcn3i7jb13cqei.buzz

  • pinktravelsnagpur.com

  • bt365038.com

  • rtpbossujang303.shop

  • osthirmaker.com

  • thelonelyteacup.com

  • rlc2019.com

  • couverture-charpente.com

  • productivagc.com

  • defendercarcare.com

  • abcentixdigital.com

  • petco.ltd

  • oypivh.top

  • micro.guru

Targets

    • Target
      ff6bc7743cc8be9cc91268c3889bdd5ec1427ca4054b7a34f873bd62d2d19089.exe
    • Size 675KB
    • SHA256 ff6bc7743cc8be9cc91268c3889bdd5ec1427ca4054b7a34f873bd62d2d19089
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    formbookna10ratspywarestealertrojan

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Formbook payload

      rat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks