Overview

overview

10

Static

static

3

QUOTATION.exe

windows7-x64

10

QUOTATION.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    QUOTATION.zip

  • Size

    593KB

  • Sample

    241009-hy44kascpr

  • MD5

    a38ea8b3088a47695537b035f52a2754

  • SHA1

    aef661061f58382fcf094a160035604809ef3351

  • SHA256

    e753396bc95424ad225b79c1744f95a27a2bd140b57efe4f2721ac2f13cbd42c

  • SHA512

    c9b742e36ceac68547ce86944c58338461d0fd981712e5021029f7f1d3b49775c404cea9750818fcd709e7cf5eda9288d6acc63b6458815851d82a815536e737

  • SSDEEP

    12288:mCSvVdR6JpIPTvMKhvEOU3mlLGYcVx5Bzdx5YWuLO7zKiaBdX:mDp6/G40y3mlLGNxvX5YWuS7hgX

Score
10/10
formbookm25sdiscoveryratspywarestealertrojan

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

m25s

Decoy

araghospitality.net

cleans.xyz

olnacasinotcs14.top

pringhillinfos.net

erkakasrumah.online

orean-course-289113002.zone

yeloma-treatment-82106.bond

76iw543gw.autos

nline-shopping-56055.bond

enetik.xyz

ax-th-6011838.fyi

itygatehousing.app

23zy998jk.bond

pslag-hal-2.online

uykoii.shop

9supjub3p.buzz

tmgl.bond

actus-catering-creations.net

ntercashspace24.homes

ierra777.vip

Targets

    • Target

      QUOTATION.exe

    • Size

      749KB

    • MD5

      5bc818a30e4d9d8a6bb828767ca1bf2a

    • SHA1

      b0ce6d58037a4f05cb31eeca7db4ad2c347bc358

    • SHA256

      20fdf7fbe573d9233084f2f338379815159e9c057a5b1189f8007d3ccf0e4204

    • SHA512

      d4d674c4cc0484160b4458cfbf6c670b066536241b9888c9b022ca2ee5bdf83e35153508ba5a5cd6127bab53704d8af49e89dcd2c92de9fd110f1164d34db3d2

    • SSDEEP

      12288:6EUHsWksNFwTFMKh5EOU30lLG6wVxm0f8dIqCSzy+MbM+jikHUUkLItauQmE:YsWfY+sy30lLG5xm+87CSzEE+PtaoE

    Score
    10/10
    formbookm25sdiscoveryratspywarestealertrojan

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Formbook payload

      rat

    • Deletes itself

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks