Overview

overview

10

Static

static

3

TapkrWIZsqC8OFr.exe

windows7-x64

10

TapkrWIZsqC8OFr.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    09bd180b4c478eec1095da534d41b462e6a1ff212d3d97479e7659715704b4f6

  • Size

    554KB

  • Sample

    240904-jxktzawglp

  • MD5

    9202154ceadab36ecd71661e264d72ec

  • SHA1

    e102f7d117df37018e2627c2a051385051d486b3

  • SHA256

    09bd180b4c478eec1095da534d41b462e6a1ff212d3d97479e7659715704b4f6

  • SHA512

    f394e2aeb379115dcb87db8c23787f912de3eef43722d5b3ce8bac6f759cdff7be589bbb8b67784fcc60ec54a8141db7f701e26ab175de8bac4f749beefa0125

  • SSDEEP

    12288:fkv5DXMwTb+oAqrMXrVK5q9v7C33X4NoODbj1vkHqXKRQdzrZt:fWDTbFrsVKeAH4Noej1kHqXKRQdn

Score
10/10
formbookb31adiscoveryratspywarestealertrojan

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

b31a

Decoy

enjamin-paaac.buzz

mail-marketing-40950.bond

pusems28-post.cyou

hindo.top

ruck-company-be.today

asinos-deutschland.net

ewancash.boats

etdopovo.casino

rcher-saaac.buzz

871166.vip

manuel.app

g3yqo.shop

-9way.xyz

qawgytfexe.bond

iefi6834.vip

ental-health-35901.bond

idat-merkez18.top

rojectleadzone.website

lirudolph.top

migloballlc.online

Targets

    • Target

      TapkrWIZsqC8OFr.exe

    • Size

      605KB

    • MD5

      aa0696458b029d1b1e10b15a8adbfb5b

    • SHA1

      fe527d59683c096d5ca61ee8ddef9e923067de03

    • SHA256

      a5721879cb391023a50bb0d6f1bc3d07fd03e457143989d0d8ce9782d0ea7f0b

    • SHA512

      649104a516ac0909a06677c8f17e4cc179e4d79571982ff1c678d3e75af29a5803be717477f9ec039a748b35f1ebfc329ccb5879b2eb2ebb40ffd4db46dece54

    • SSDEEP

      12288:iks9yqTB+ZR9xqduXrNC7q9pbG7xXyNOODbLhT4pUpfc+S0q:iRgqTBhdeNCQAZyNOeLhT4mpf8h

    Score
    10/10
    formbookb31adiscoveryratspywarestealertrojan

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Formbook payload

      rat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks