Overview

overview

10

Static

static

3

new contract.exe

windows7-x64

10

new contract.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    11102024_0203_10102024_new contract.zip

  • Size

    537KB

  • Sample

    241011-cg372svelk

  • MD5

    1915929413ff82ffb4ef291ce91c07dc

  • SHA1

    6957d4a7c84ae32e024d51601b3f91cfd15657d8

  • SHA256

    16fffa7990cf343226da2d5b614bb7eb0bffb81bb6bb118148f0610d48bf82ee

  • SHA512

    69262b9d64b8e3535c3f1ba3f987481439488bbc7c9ecf681c42a09b48d01f52019882401b56c577704f6226f458f65d8c59e5c85d65a6d5fe6ffb16ce5f9eb1

  • SSDEEP

    12288:IAHS/+JtQaqf/Tv+xfFxp2m5LpyoBfJN0lBwYi1Wci14woJ5RBsbU:FRJGaCkfEmFhJ6ylMsJBs4

Score
10/10
formbookc89pdiscoveryratspywarestealertrojan

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

c89p

Decoy

ftersaleb.top

dcustomdesgins.net

ostbet2024.live

rhgtrdjdjytkyhretrdjfytd.buzz

atauniversity.tech

idoctor365.net

x-design-courses-29670.bond

ellowold-pc.top

ransportationmmsytpro.top

areerfest.xyz

artiresbah-in.today

ijie.pro

torehousestudio.info

69-11-luxury-watches.shop

earing-tests-44243.bond

hits.shop

hzl9.bond

lood-test-jp-1.bond

livialiving.online

usymomsmakingmoney.online

Targets

    • Target

      new contract.exe

    • Size

      587KB

    • MD5

      c6b38036b68ea21306e8814ab1b1b4d9

    • SHA1

      6b1ee982b77f2274ff6844f06706f13418dc6aa0

    • SHA256

      732336eccda1e0e01a9474a968eb6ac9725fec8e8e03ad950472df75ba470693

    • SHA512

      ffe83694f14e956fcd63e0f83845a1d631da501cfbf3552f0bc043d228b3fe59465a6c30bfd5c4bb98faaa89d00ecc4bf5881734a9d26d40759f7ce45eeee833

    • SSDEEP

      12288:b5WqpMT1dGUsVYQP3OT0UuA/4jj2m5tpyoBfVN07dq9ovF6sDYSuk7xLZXo:bw0c1dGUsVYQ6uO/mbhVKqqYVk7xdo

    Score
    10/10
    formbookc89pdiscoveryratspywarestealertrojan

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Formbook payload

      rat

    • Deletes itself

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks