Overview

overview

10

Static

static

10

2512-3-0x0...ry.exe

windows7-x64

1

2512-3-0x0...ry.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2512-3-0x0000000000400000-0x000000000042F000-memory.dmp

  • Size

    188KB

  • Sample

    241105-q5gwlsshpk

  • MD5

    0f7e4a60d98741130f521f5d5354082b

  • SHA1

    f9d7ef5e9c0e81a9ddf9ebbd17d5aea3ffde0dbe

  • SHA256

    89fc74cc48f5da6e0b3e6eb799d9caf77c9ea63571a38c5b99a9932b61bb903d

  • SHA512

    b16651804d526c9de3d96ebaea14f90b722dd1d98a8cdf887860e744edb90a14854a20d1365e2b18898f2b5fa833b5c19a48184a0261582e8b29f01dcad54679

  • SSDEEP

    3072:Iu0UMFM+T6MDWipeyRdFqFtgwKayHH+xHgHt0WCDr9WCTqfiJE:hTLyRdE9KayHHoHgH2zDrXTc

Score
10/10
formbookge07discoveryrat

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

ge07

Decoy

mail-marketing2-9946168.live

ouwmijnweb.net

verythingmars.online

rgqhcy.shop

unter-saaaa.buzz

ox.bio

arkside.top

ransportationmmsktpro.top

lue-ocean-bar.group

lympiccat.xyz

onstruction-jobs-49170.bond

andon-saaab.buzz

fdmw.sbs

48430091.top

yuyh.boats

kyt968.shop

pismedical.shop

ocialmediafactory.xyz

inussofa.shop

ision.fit

Targets

    • Target

      2512-3-0x0000000000400000-0x000000000042F000-memory.dmp

    • Size

      188KB

    • MD5

      0f7e4a60d98741130f521f5d5354082b

    • SHA1

      f9d7ef5e9c0e81a9ddf9ebbd17d5aea3ffde0dbe

    • SHA256

      89fc74cc48f5da6e0b3e6eb799d9caf77c9ea63571a38c5b99a9932b61bb903d

    • SHA512

      b16651804d526c9de3d96ebaea14f90b722dd1d98a8cdf887860e744edb90a14854a20d1365e2b18898f2b5fa833b5c19a48184a0261582e8b29f01dcad54679

    • SSDEEP

      3072:Iu0UMFM+T6MDWipeyRdFqFtgwKayHH+xHgHt0WCDr9WCTqfiJE:hTLyRdE9KayHHoHgH2zDrXTc

    Score
    3/10
    discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks