General

  • Target

    dd674329e193ad3d072e07fe1b442340N

  • Size

    741KB

  • Sample

    240908-jd6mbswcpb

  • MD5

    dd674329e193ad3d072e07fe1b442340

  • SHA1

    9064b660c5643e0104bb81f9a6a71b340f7d5f1a

  • SHA256

    8a26bda9ab6bcbd3ef5a008db1bc15e46677ab1545bd2aac4e081ea3df5077e9

  • SHA512

    a24311e04ca3604069fc0f9feb736897a8598102abba6cdc600bd502870de689cd3437d97241ad801a388d13b1c1c081e591e119fc4f31aceffa03d1af472584

  • SSDEEP

    12288:Ex5zjLf30WH0TwOqp0eXIBq2VhXpAOnTveaIEC+O22XPtJV6HAfiL8IftFuMy:gjj0ywkpr0q2vjNtC+O9XPn+A4/9

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

b48n

Decoy

anifestmindset.net

ommybahamabigsales.shop

3tcxr.xyz

iano-world.net

rconf23.net

atherpa.shop

trllrpartners.club

5sawit777.pro

ctbhuxcdreioijresol.top

opinatlas.app

pinstar.xyz

mfengwa.top

8games13.xyz

tickpaket.online

iphuodongallbbtbtm.top

ental-bridges-51593.bond

laywithkemon.rest

lkpiou.xyz

a88.land

igfloppafan.club

Targets

    • Target

      dd674329e193ad3d072e07fe1b442340N

    • Size

      741KB

    • MD5

      dd674329e193ad3d072e07fe1b442340

    • SHA1

      9064b660c5643e0104bb81f9a6a71b340f7d5f1a

    • SHA256

      8a26bda9ab6bcbd3ef5a008db1bc15e46677ab1545bd2aac4e081ea3df5077e9

    • SHA512

      a24311e04ca3604069fc0f9feb736897a8598102abba6cdc600bd502870de689cd3437d97241ad801a388d13b1c1c081e591e119fc4f31aceffa03d1af472584

    • SSDEEP

      12288:Ex5zjLf30WH0TwOqp0eXIBq2VhXpAOnTveaIEC+O22XPtJV6HAfiL8IftFuMy:gjj0ywkpr0q2vjNtC+O9XPn+A4/9

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

    • Formbook payload

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks