General
-
Target
13112024_0009_12112024_decontare facturi pentru plata 12 noiembrie 2024 xlsx.z
-
Size
493KB
-
Sample
241113-afyvtswrcl
-
MD5
581c017adf5bb7a23db0f8e2855837f9
-
SHA1
857b6c919d9f5d7e8269fcc268fbaf89712a39a4
-
SHA256
dddfb9fd01740055a5dbf0ac2be671b0cc7ea825fc4d6fb40dca5abac45a0e28
-
SHA512
01bc8b8d8adcd1874fa7768e184eb3db110464cd438a2f12858ac07e72c3f9b0bfba65eb973e00107f39ea847dd88264c8538408e9d410bed63dd52e87b86bb3
-
SSDEEP
12288:jU9jkptCKbKpfyVCejn7F3JXeBCD+l1ltcgd9SYwygS:jfpg71ykebvXekD4qgCYj
Malware Config
Extracted
formbook
4.1
ud04
oum7.pro
ovonordisk.online
akrzus.pro
tendmtedcpsa.site
mm.foo
animevyhgsft29817.click
digdxxb.info
1130.vip
uy-now-pay-later-74776.bond
ybzert.online
edcn.link
rime-flow-bay.xyz
nd777id.beauty
otoyama.shop
lranchomx.xyz
unluoren.top
uglesang-troms.net
udulbet88.net
raquewear.shop
ijanarko.net
Targets
-
-
Target
decontare facturi pentru plata 12 noiembrie 2024.xlsx.exe
-
Size
845KB
-
MD5
7971ff7b23d758f07c695b8098759dc5
-
SHA1
c666b84f9b789cc6f56438b4d957795ab72db07b
-
SHA256
abd47ee3632ba7314a51a4f87cc129b9aa28fb684426f26c865fca09ad0ce46b
-
SHA512
ccb6bf09366b551a20700b58e355f72deb0dd4d42810cc66573483de8c925f9cd1bfbfccd3f1d90159787ea0be32cd348ac84d5b4e4fd70f1a509f9af30c1b36
-
SSDEEP
12288:ehkDgouVA2nxKkorvdRgQriDwOIxmxiZnYQE7PJcE4aCSFYeV0LPG8vkWO:uRmJkcoQricOIQxiZY1iaCTIvD
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook family
-
Formbook payload
-
Suspicious use of SetThreadContext
-