Overview

overview

10

Static

static

3

Ot7EdLwo881ajbV.exe

windows7-x64

3

Ot7EdLwo881ajbV.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9a59a035e92ec1450496a746e75d32b48a378def351207e606e1a809f2faf797.r01

  • Size

    592KB

  • Sample

    241022-b5bx2azbke

  • MD5

    cecdbd3cf5e923f2fd23982daa049ea2

  • SHA1

    4c8827f4cfc6a55ca1ec241d89bdfb41004c5afb

  • SHA256

    9a59a035e92ec1450496a746e75d32b48a378def351207e606e1a809f2faf797

  • SHA512

    c4fe6c3ebb5bede497506de5cb8ec7f01a33786c08342d71fdf32007aa0f61499ba409ae9f11d0c34adf776478b71a521f1532f1003624e8468c029e3b0728a3

  • SSDEEP

    12288:cWAxFBcrAWAzcZfdBheEzOy7hJUKlCj7xXM6+MnVdSBGWL:cDdWAzqCCAKlC/W6+J

Score
10/10
formbookdr14discoveryratspywarestealertrojan

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

dr14

Decoy

ypewriter.pro

conoficina.shop

etrules.net

bwuc-ball.xyz

obis.xyz

tpbuncistoto.xyz

lhakikas.net

long-ybzxgm.xyz

ray-east.xyz

hild-rbfij.xyz

imself-kyac.xyz

ftuu-government.xyz

om-tracksi.top

olicy-yzipy.xyz

ntalaxlesbabbool.cfd

ingleyou.top

ieryfiertzframing.cfd

pon-nacgrz.xyz

aomei515.top

alzgroup.net

Targets

    • Target

      Ot7EdLwo881ajbV.exe

    • Size

      617KB

    • MD5

      f99cdd71043a75d4fe553fb39de6d3e5

    • SHA1

      28d123dd5f049724ec34cea59a73fb7385b3f904

    • SHA256

      356dd4d1abe930b8189e5d5a1870c6a70236a12db73b24c19d0e461056c15dfa

    • SHA512

      08cd7223a4019ed691c67e3c93fa7852842235108baaeb21e2ffb14426b0cfd35086ffb7542f675d863a937601f1f8cd1a11ca1f3ef908dd879e445dcee94956

    • SSDEEP

      12288:jfAcXkhMOoltiJ5i/6Ob/Bc1WsML0oORqYQb7Z4TwmlKfKPH1fG0Q4bXtk+yE:pkh5oDiJ5i/6ObZcpMnnYQvZo8fKdf/T

    Score
    10/10
    discoveryformbookdr14ratspywarestealertrojan

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Formbook payload

      rat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks