General

  • Target

    7d58c8bd03c166d6a74bcec471538b4803d1ca9aa9d32f5a5286dd5aafea62ce.exe

  • Size

    1.0MB

  • Sample

    240831-bzszcsydlk

  • MD5

    4472308b26d97576bda38ee8976036af

  • SHA1

    69f68ae82ffa3d8804aed31ce151efb26a74a8c1

  • SHA256

    7d58c8bd03c166d6a74bcec471538b4803d1ca9aa9d32f5a5286dd5aafea62ce

  • SHA512

    fdaf2e5c1aa93e67798fe99725cac4da3898be74e76eb22440b6bcce6ab064fcd73f1a25581f0ca4ae16e9f527927f661ad18dd5ef27d3fa0f4a2c9799befa32

  • SSDEEP

    24576:Ftb20pkaCqT5TBWgNQ7aIsWLhU/b5bTj6A:2Vg5tQ7aI7hS5

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

bi05

Decoy

ollow-the-bit.online

aopho.autos

14ra567dp.autos

48651301.top

ussian-dating-54714.bond

sychology-degree-80838.bond

lytracker.xyz

strology-forest.sbs

swjbcl3.top

ridgenexttechnologies.partners

lroy.sbs

kyscreen.vip

anhit.live

uckyheart.xyz

orddserials.online

hetune.shop

nherited-traits-ant.bond

stanaslot-1.xyz

sychologist-therapy-36914.bond

iandramonami.net

Targets

    • Target

      7d58c8bd03c166d6a74bcec471538b4803d1ca9aa9d32f5a5286dd5aafea62ce.exe

    • Size

      1.0MB

    • MD5

      4472308b26d97576bda38ee8976036af

    • SHA1

      69f68ae82ffa3d8804aed31ce151efb26a74a8c1

    • SHA256

      7d58c8bd03c166d6a74bcec471538b4803d1ca9aa9d32f5a5286dd5aafea62ce

    • SHA512

      fdaf2e5c1aa93e67798fe99725cac4da3898be74e76eb22440b6bcce6ab064fcd73f1a25581f0ca4ae16e9f527927f661ad18dd5ef27d3fa0f4a2c9799befa32

    • SSDEEP

      24576:Ftb20pkaCqT5TBWgNQ7aIsWLhU/b5bTj6A:2Vg5tQ7aI7hS5

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

    • Formbook payload

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks