General
-
Target
7dbf272ace08e743fc7c3ebaca67edcd8ef1cd4979a7e67ac8ec10e77329268f
-
Size
814KB
-
Sample
241112-g8xlssxblg
-
MD5
0d331f38e38f409e80851c1db98dc5bb
-
SHA1
15cfc0e48124c0603fbd04b06268fbb3b3eff934
-
SHA256
7dbf272ace08e743fc7c3ebaca67edcd8ef1cd4979a7e67ac8ec10e77329268f
-
SHA512
05d83ea5e59ce072591ab036a9d6a6a0215e6c290f478fdfb3fdbc5ec44ac3aa265d4dda58722bee6db1ee3cc110359309423e444ea2dd41066b39be4ed176e8
-
SSDEEP
12288:zK3kLf6WCAEEtNTQ54zCw5vgihSPPMNYwq4Dna7qX+HqHkCQ/7LZJmIwtc:zj7t7t8W154iAPm9DaBKHkCQ/7LZJBYc
Malware Config
Extracted
formbook
4.1
q06e
iibutogel88.life
atumainitx.net
axto1xb.top
iberalparti.xyz
etfury.shop
ainter-job-14480.bond
rhyd82593.vip
yexoiup.xyz
ityreel.page
usiness-ddljxgk.top
eifeigou.top
asl321.dev
eativ.cloud
ollywoodbets.fan
azekage.shop
ojarski.online
ardtaste.net
ltair-bots.online
atncs.top
k8y.info
Targets
-
-
Target
New order.exe
-
Size
952KB
-
MD5
47a6b60d5e3fc02f322dfe2d81782f58
-
SHA1
36d44911956c67b0a4c403d26759e9ca9a6e956c
-
SHA256
979e6f85bb86ba8f1dc0bbe0770f12b2ec48d329d369f9ba84dd31598e8b3aed
-
SHA512
099d9cc1622f6f2046704e5dfa7441d10d240a741f1278375c8f399d036f95bf70dd314854bbefc4280e50bfade2a0403f28f172f9bbb15c00df38a62b8b2e11
-
SSDEEP
12288:acVScL0nsDT0Q00QEA86GIbYgXMq4Dnk7qX0HqHuCQ77zZFsn58qHXuB:pVYn4mn86TbZSDkXKHuCQ77zZFA58D
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook family
-
Formbook payload
-
Suspicious use of SetThreadContext
-