Overview

overview

10

Static

static

3

Creative A...cy.exe

windows7-x64

10

Creative A...cy.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    88489f399a91cf02b01012981cd1cec452c0e885d6c5728892f45920fdc68b66
  • Size 619KB
  • Sample240905-nqa4eazhqf
  • SHA256 88489f399a91cf02b01012981cd1cec452c0e885d6c5728892f45920fdc68b66
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
formbookj01sdiscoveryratspywarestealertrojan

Malware Config

Extracted

Family

  • formbook

Version

  • 4.1

Campaign

  • j01s

Decoy

  • ransportationmtsmtpro.top

  • v-camper-motorhomes-77740.bond

  • vrepairmumbai.shop

  • hocosmooth.xyz

  • etirementplanning01.today

  • ompralojaonline.shop

  • ransportationmpmptpro.top

  • hehomeownermanuel.info

  • oppr.fit

  • ilmynadin.cfd

  • ontrol-bipolar-treatments.club

  • eorge-saaab.buzz

  • ose-ferrer.online

  • 16au612ch.bond

  • y0015.net

  • ksdnhe58w.top

  • epression-treatment-75701.bond

  • illagin.shop

  • xahf.top

  • vzpbty.buzz

Targets

    • Target
      Creative Artists Agency.exe
    • Size 675KB
    • SHA256 e3b137b034830c5189138a584ad99c6710a65e30d94779c92a1610c3d7de97ad
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    formbookj01sdiscoveryratspywarestealertrojan

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Formbook payload

      rat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks