General

  • Target

    5c376333ba521bd53b47eb9b0ac1bef3c7f52172a8152bf566bb9da37f92084a.exe

  • Size

    1.1MB

  • Sample

    240910-caewwasgqa

  • MD5

    60484575a729fea8468fb9f6d9dcb68e

  • SHA1

    c1e9c49b5e00f3af3c17fc88877d8583ef64042a

  • SHA256

    5c376333ba521bd53b47eb9b0ac1bef3c7f52172a8152bf566bb9da37f92084a

  • SHA512

    ad72b946888951594d0a50624c40e47d9aede4eb4216f4c0b10b21075cc96afc2891912bab695fd0a4a79b215defe6de56b9ad8e81e220be93094797e79555b9

  • SSDEEP

    24576:PqDEvCTbMWu7rQYlBQcBiT6rprG8aKM0bQI31dYpA:PTvC/MTQYxsWR7aKFbzd

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

ot96

Decoy

yclingbear.studio

sxuio.xyz

eon-official-bk-o57v.buzz

teel.management

rusjitu.sbs

ighwald-holdings.info

ummitfinancal.vip

layvalleyconstruction.online

pp-games-efficsecuspon.xyz

ouh.shop

mgltd.services

gshsjwhgsg.fun

eidotijolo.online

yifg.sbs

nline-gaming-ox-mx.xyz

ux-money.info

inergiputraborneo.dev

panish-classes-67016.bond

reightrading.info

23bet.xyz

Targets

    • Target

      5c376333ba521bd53b47eb9b0ac1bef3c7f52172a8152bf566bb9da37f92084a.exe

    • Size

      1.1MB

    • MD5

      60484575a729fea8468fb9f6d9dcb68e

    • SHA1

      c1e9c49b5e00f3af3c17fc88877d8583ef64042a

    • SHA256

      5c376333ba521bd53b47eb9b0ac1bef3c7f52172a8152bf566bb9da37f92084a

    • SHA512

      ad72b946888951594d0a50624c40e47d9aede4eb4216f4c0b10b21075cc96afc2891912bab695fd0a4a79b215defe6de56b9ad8e81e220be93094797e79555b9

    • SSDEEP

      24576:PqDEvCTbMWu7rQYlBQcBiT6rprG8aKM0bQI31dYpA:PTvC/MTQYxsWR7aKFbzd

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

    • Formbook payload

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks