General
-
Target
8c3148e32c5b14e3f40dd1f179cef31765668f5d8a0682d5227fa3e2a1e83e48
-
Size
626KB
-
Sample
241014-txjl1sthpe
-
MD5
8665e5bd1bfde5a31735dada7f6141f1
-
SHA1
52168eb62b2009344a4264dd98b9935cc1e4958f
-
SHA256
8c3148e32c5b14e3f40dd1f179cef31765668f5d8a0682d5227fa3e2a1e83e48
-
SHA512
2a622694abbc5b5af69d0cbb2da745e0efeded14fcf9b26301b5214d8bfeff1b778c9afc0845e26c038fa4fb746a8120c589ca3507f2097b8bd5d785624ebf5b
-
SSDEEP
12288:YfQW0VXnhMZfEWt42XlPYIIxI5PvZ34XpdfxxkLdlmU5P59lp:WexWqqlPt+IhvZILfDkLdZ5P51
Malware Config
Extracted
formbook
4.1
g65s
uel-fleet-cards-29924.bond
axmz.digital
nnovationmarble.net
beldgfhcbcdry23164dfvc.yachts
risula888x.top
nvestment-services-84967.bond
hviugld.shop
edona-train-tours-us.today
ada.design
ibrarybeauty.online
eminipros.top
r-outsourcing-20490.bond
7mfx.bond
drwviol.xyz
opfilmestorrents.net
ai-saaaa.buzz
eanfreau.net
ighwaldholding.biz
angwood-roleplay.online
ucinghoki.fun
Targets
-
-
Target
Abu Dhabi police fine check.exe
-
Size
1.0MB
-
MD5
f0ca8504afee761d4cdaa32fd15aaeff
-
SHA1
03c3c10beb05d81353ec750410021e9ec81058b9
-
SHA256
5549d7b129682b0572c08faf0d97d93caac40c2f36b230e13c428b4a90f1bb87
-
SHA512
4437ba928d9fc3a8925e518fa23e90dd59d058f1d8dbdd57235255646f0059d07cf92d9883021ab62d6edb72f5944f4797e0e5fe67570bdacdf3c97e297f2f82
-
SSDEEP
24576:eCdxte/80jYLT3U1jfsWaecf3kfdh5P58m3Q:3w80cTsjkWaecvkfdLRM
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook payload
-
Suspicious use of SetThreadContext
-