General

  • Target

    439578a2a659ff6245814e2e4306dca997a267a175f95bd8501ccfdc4bca3e3b.exe

  • Size

    1.2MB

  • Sample

    240823-cer21azbmg

  • MD5

    3ce1e9f82cf31e5eb477f2d3515030cb

  • SHA1

    26cb750b98cc12303f41d56d3ce07e325cba8fc4

  • SHA256

    439578a2a659ff6245814e2e4306dca997a267a175f95bd8501ccfdc4bca3e3b

  • SHA512

    94776549e5a5f2f9afb53d07ddc954fcc66fe8b37c829750457ec283b5c87debdbfe3cc260f108bacd42bfd5947b850458532b807a9510d9c9c6ac99a917846b

  • SSDEEP

    24576:tqDEvCTbMWu7rQYlBQcBiT6rprG8aab43wF/xE3ivuIg:tTvC/MTQYxsWR7aab43w2

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

m50k

Decoy

6353.club

qahzjgvuto.bond

airtransplantprice001.shop

enjamin-paaaa.buzz

ealthcare-softwares-my-de.xyz

aeempreendora.online

eaworld.website

ental-implants-spain-99823.bond

inanzcheckup.online

inematography-course-96303.bond

6325.club

wygbv.vip

onceng77gacor.xyz

arehouse-inventory-71481.bond

axihochheim.net

afeteraschile.today

gcq712.top

eonbets-zerkalo-vkhod-wout.buzz

mpathwaycounseling.net

b-0107.xyz

Targets

    • Target

      439578a2a659ff6245814e2e4306dca997a267a175f95bd8501ccfdc4bca3e3b.exe

    • Size

      1.2MB

    • MD5

      3ce1e9f82cf31e5eb477f2d3515030cb

    • SHA1

      26cb750b98cc12303f41d56d3ce07e325cba8fc4

    • SHA256

      439578a2a659ff6245814e2e4306dca997a267a175f95bd8501ccfdc4bca3e3b

    • SHA512

      94776549e5a5f2f9afb53d07ddc954fcc66fe8b37c829750457ec283b5c87debdbfe3cc260f108bacd42bfd5947b850458532b807a9510d9c9c6ac99a917846b

    • SSDEEP

      24576:tqDEvCTbMWu7rQYlBQcBiT6rprG8aab43wF/xE3ivuIg:tTvC/MTQYxsWR7aab43w2

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

    • Formbook payload

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks