Overview

overview

10

Static

static

10

2292-3-0x0...ry.exe

windows7-x64

1

2292-3-0x0...ry.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2292-3-0x0000000000400000-0x000000000042F000-memory.dmp

  • Size

    188KB

  • Sample

    241111-mzb7dsxpav

  • MD5

    a4b6354fafdfac088e8d5bb5deed32e8

  • SHA1

    b5e5fa3e4b6c6c9b4bf45d24d753a057e9d6afe7

  • SHA256

    58eebaf4139691625885e85925b61d6fcbefa05e1541c75d33b76118d75ecea0

  • SHA512

    419a126feafff3c7854720bea992888a404da1dd821e734f9f14c5772073e4836edfd74926ab51345f47a0fda9cb9ceab14c3d0580a7af0a7d168700730c8929

  • SSDEEP

    3072:1Wm49FEF9tGkOlw/y5+SOrc6gOUOILqEuAQEgcZojVht26:3XB/ychY6gOUOqcnv

Score
10/10
formbookcl21discoveryrat

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

cl21

Decoy

0001.shop

earch-parttimejobs.today

are888.top

akanhaunthipped.shop

othing-heyu.xyz

cadvirsor.net

nclanalae.shop

lectric-cars-mexico.today

oxj-question.xyz

ersonalloanoffers.today

ersonalloans-fo54-fo37.click

verybody-ewfx.xyz

ercuremontauban.media

azilimdunyam.net

airs-clinicato.today

wiftsscend.click

ertainly-jbws.xyz

8xeng.app

damekadmitageable.cfd

ollapsedec.shop

Targets

    • Target

      2292-3-0x0000000000400000-0x000000000042F000-memory.dmp

    • Size

      188KB

    • MD5

      a4b6354fafdfac088e8d5bb5deed32e8

    • SHA1

      b5e5fa3e4b6c6c9b4bf45d24d753a057e9d6afe7

    • SHA256

      58eebaf4139691625885e85925b61d6fcbefa05e1541c75d33b76118d75ecea0

    • SHA512

      419a126feafff3c7854720bea992888a404da1dd821e734f9f14c5772073e4836edfd74926ab51345f47a0fda9cb9ceab14c3d0580a7af0a7d168700730c8929

    • SSDEEP

      3072:1Wm49FEF9tGkOlw/y5+SOrc6gOUOILqEuAQEgcZojVht26:3XB/ychY6gOUOqcnv

    Score
    3/10
    discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks