Overview

overview

10

Static

static

10

2232-24-0x...ry.exe

windows7-x64

1

2232-24-0x...ry.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    2232-24-0x0000000000400000-0x000000000042F000-memory.dmp
  • Size 188KB
  • Sample240805-hpkcsszajn
  • SHA256 fcfda5a7a8b441103c5ba5e977fa23fded824901e5dfe0d47986af8c905dfdd3
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
formbookmd02discoveryrat

Malware Config

Extracted

Family

  • formbook

Version

  • 4.1

Campaign

  • md02

Decoy

  • onsen1508.com

  • partymaxclubmen36.click

  • texasshelvingwarehouse.com

  • tiantiying.com

  • taxcredits-pr.com

  • 33mgbet.com

  • equipoleiremnacional.com

  • andrewghita.com

  • zbbnp.xyz

  • englandbreaking.com

  • a1b5v.xyz

  • vizamag.com

  • h0lg3.rest

  • ux-design-courses-17184.bond

  • of84.top

  • qqkartel88v1.com

  • avalynkate.com

  • cpuk-finance.com

  • yeslabs.xyz

  • webuyandsellpa.com

Targets

    • Target
      2232-24-0x0000000000400000-0x000000000042F000-memory.dmp
    • Size 188KB
    • SHA256 fcfda5a7a8b441103c5ba5e977fa23fded824901e5dfe0d47986af8c905dfdd3
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks