Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Payment_Advice pdf.exe

  • Size

    1.2MB

  • Sample

    240914-gcp7vaygjn

  • MD5

    6cf9d0cd325beeb461dbe39c74483686

  • SHA1

    71792078df265b5aef884d7f3710a24d11088262

  • SHA256

    cea476506bdbb5781b4fc674b15a0d15c1be4e7459a0b0bdd7132e1d406a226e

  • SHA512

    4ec448183d6c49c82e4086b8a1a3a7d0118ee10e420615cf58a3eaa5097a15c5903d3614616634cc692172a75f6982448263b159e252a84a2a4e426cc2e72f8e

  • SSDEEP

    24576:PCdxte/80jYLT3U1jfsWa32BvSTGU7hHtQ:Ow80cTsjkWa3e69c

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

k94g

Decoy

nstandgoz.xyz

dhd-treatment-37310.bond

13s-braces-us-ze.fun

umdona.shop

96ph803ql.bond

kka9max.net

corporate-10.xyz

edicalassistance869840.online

lobalresources-bh.xyz

3145978.xyz

ovdaawebsite.online

etting-thailand.net

icloud.xyz

poxk.shop

25ks-ls72510.cyou

women.info

iwyrfbfvhv9.asia

luratu.xyz

ffordable-power-charger.today

edanuryilmaz.xyz

Targets

    • Target

      Payment_Advice pdf.exe

    • Size

      1.2MB

    • MD5

      6cf9d0cd325beeb461dbe39c74483686

    • SHA1

      71792078df265b5aef884d7f3710a24d11088262

    • SHA256

      cea476506bdbb5781b4fc674b15a0d15c1be4e7459a0b0bdd7132e1d406a226e

    • SHA512

      4ec448183d6c49c82e4086b8a1a3a7d0118ee10e420615cf58a3eaa5097a15c5903d3614616634cc692172a75f6982448263b159e252a84a2a4e426cc2e72f8e

    • SSDEEP

      24576:PCdxte/80jYLT3U1jfsWa32BvSTGU7hHtQ:Ow80cTsjkWa3e69c

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

    • Formbook payload

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.