formbook | 51271d1173aa806887cb4859b4b0df5b8b921e68f4f22189bf5d13f9f9f5971d

General

Target

3160-15-0x0000000000B00000-0x0000000000B2F000-memory.dmp
Size

188KB
Sample

240906-h8tqkstcmr
MD5

3c0a2da3fe238330a6b0054c856ed47f
SHA1

965bb12c81de4f9896bdc61a23a240e0ef9d6456
SHA256

51271d1173aa806887cb4859b4b0df5b8b921e68f4f22189bf5d13f9f9f5971d
SHA512

615283dbcda911b466818a5aa1ac3c7638440cdc075c4d90a0932bdc532fbcc9891e1cdec3f179c3048c008a34346f9a1dd28394bc2a09558744f698c92a674d
SSDEEP

3072:APVLkcDOSdijN3+yhrca0SFPvZDw2UWNywqD30HaIwy43qa:sYB+uAa0SF9wjWIeHaIwyM

Score

10^/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

na10

Decoy

tetheus.com

ventlikeyoumeanit.com

tintbliss.com

rinabet357.com

sapphireboutiqueusa.com

abc8bet6.com

xzcn3i7jb13cqei.buzz

pinktravelsnagpur.com

bt365038.com

rtpbossujang303.shop

osthirmaker.com

thelonelyteacup.com

rlc2019.com

couverture-charpente.com

productivagc.com

defendercarcare.com

abcentixdigital.com

petco.ltd

oypivh.top

micro.guru

Targets

- Target
  
  3160-15-0x0000000000B00000-0x0000000000B2F000-memory.dmp
- Size
  
  188KB
- MD5
  
  3c0a2da3fe238330a6b0054c856ed47f
- SHA1
  
  965bb12c81de4f9896bdc61a23a240e0ef9d6456
- SHA256
  
  51271d1173aa806887cb4859b4b0df5b8b921e68f4f22189bf5d13f9f9f5971d
- SHA512
  
  615283dbcda911b466818a5aa1ac3c7638440cdc075c4d90a0932bdc532fbcc9891e1cdec3f179c3048c008a34346f9a1dd28394bc2a09558744f698c92a674d
- SSDEEP
  
  3072:APVLkcDOSdijN3+yhrca0SFPvZDw2UWNywqD30HaIwy43qa:sYB+uAa0SF9wjWIeHaIwyM
Score

3^/10

discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2