Overview

overview

10

Static

static

5

SHIPPING DOC.exe

windows7-x64

10

SHIPPING DOC.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SHIPPING DOC.exe

  • Size

    1.0MB

  • Sample

    241106-hnnzlavncz

  • MD5

    f49a779c9194a3b100f591a333b608a6

  • SHA1

    4141b908112fed259eca359c0d5be3be0bc8ba14

  • SHA256

    51132cd1705668a4b8b716b3169779133de701532821ba4d9cbea174143fceb8

  • SHA512

    c745a3afa19bac0a00738f03db1593ae1c0c4815ad77223f7b9a31862383ffe15c939810543c3bd1601698fd1c0d232378ad512f0645d6fb0bd80dced38b3db1

  • SSDEEP

    24576:uRmJkcoQricOIQxiZY1iaCmKIvKrY2E2JyH/O59NQU:7JZoQrbTFZY1iaC+EYT2AHG59/

Score
10/10
formbookge07discoveryratspywarestealertrojan

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

ge07

Decoy

amyard.shop

eloshost.xyz

g18q11a.top

orensic-vendor-735524320.click

ithin-ksvodn.xyz

xhyx.top

elonix-traceglow.pro

cillascrewedsedroth.cfd

wner-nyquh.xyz

reyhazeusa.shop

esmellretaperetotal.cfd

hqm-during.xyz

pipagtxcorrelo.xyz

lray-civil.xyz

apybarameme.xyz

rbuds.shop

hild-fcudh.xyz

rkgexg.top

estwestcottwines.shop

giyztm.xyz

Targets

    • Target

      SHIPPING DOC.exe

    • Size

      1.0MB

    • MD5

      f49a779c9194a3b100f591a333b608a6

    • SHA1

      4141b908112fed259eca359c0d5be3be0bc8ba14

    • SHA256

      51132cd1705668a4b8b716b3169779133de701532821ba4d9cbea174143fceb8

    • SHA512

      c745a3afa19bac0a00738f03db1593ae1c0c4815ad77223f7b9a31862383ffe15c939810543c3bd1601698fd1c0d232378ad512f0645d6fb0bd80dced38b3db1

    • SSDEEP

      24576:uRmJkcoQricOIQxiZY1iaCmKIvKrY2E2JyH/O59NQU:7JZoQrbTFZY1iaC+EYT2AHG59/

    Score
    10/10
    formbookge07discoveryratspywarestealertrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks