Overview

overview

10

Static

static

5

SHIPPING DOC.exe

windows7-x64

10

SHIPPING DOC.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    05112024_SHIPPING DOC.r15

  • Size

    718KB

  • Sample

    241107-d26dkstmdz

  • MD5

    04d6a1ff3a715bd853dcac5ef111a0df

  • SHA1

    253f594ba17fd03e2dc76fa31cf93c7a766497a1

  • SHA256

    8584db9a535c867a24e016d0e6165f732071f5f1c037db3c4c5a240b940f8af0

  • SHA512

    d3120ec1d381e1e28a6c87804c775d1feb0af176f530aaaa3f909be99407a1f6f0f6837d96c32a3c11662d24cc67a4fa558532cba60ae0a370746789da527184

  • SSDEEP

    12288:psNx+QKbK8kIyYCedTnjjLr0fbL0ztyqYBC1uSPjTBVt010NZmOgekzJq/fp7wkQ:pU+Q7KyXet7r0fUeC9TBDY+KeoJQp7wN

Score
10/10
formbookge07discoveryratspywarestealertrojan

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

ge07

Decoy

amyard.shop

eloshost.xyz

g18q11a.top

orensic-vendor-735524320.click

ithin-ksvodn.xyz

xhyx.top

elonix-traceglow.pro

cillascrewedsedroth.cfd

wner-nyquh.xyz

reyhazeusa.shop

esmellretaperetotal.cfd

hqm-during.xyz

pipagtxcorrelo.xyz

lray-civil.xyz

apybarameme.xyz

rbuds.shop

hild-fcudh.xyz

rkgexg.top

estwestcottwines.shop

giyztm.xyz

Targets

    • Target

      SHIPPING DOC.exe

    • Size

      1.0MB

    • MD5

      f49a779c9194a3b100f591a333b608a6

    • SHA1

      4141b908112fed259eca359c0d5be3be0bc8ba14

    • SHA256

      51132cd1705668a4b8b716b3169779133de701532821ba4d9cbea174143fceb8

    • SHA512

      c745a3afa19bac0a00738f03db1593ae1c0c4815ad77223f7b9a31862383ffe15c939810543c3bd1601698fd1c0d232378ad512f0645d6fb0bd80dced38b3db1

    • SSDEEP

      24576:uRmJkcoQricOIQxiZY1iaCmKIvKrY2E2JyH/O59NQU:7JZoQrbTFZY1iaC+EYT2AHG59/

    Score
    10/10
    formbookge07discoveryratspywarestealertrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks