General
-
Target
9a711d77ad0c7a088e281c490a7bc22d0ed0561a257546d4618b9fc9040d741e.z
-
Size
582KB
-
Sample
241123-ymfvlazldj
-
MD5
a0b78e39d7f011a6f1fbfc500de0b692
-
SHA1
9dc3c1a25316d5f20426e1e30a503ff7eb3d838c
-
SHA256
9a711d77ad0c7a088e281c490a7bc22d0ed0561a257546d4618b9fc9040d741e
-
SHA512
5e4ba327dffd4f4f576ef4ecaa84d14f142eb746a82a47c7e8a8505116eb3db3b9949efb14f3eba2c234d600670ee0081a8a1b083ecc99971a6cd9a02436a5ba
-
SSDEEP
12288:fywZt6cryKczKeYux0it9111w0c4uuFAgCr+csvW:KwZvrEzKkxt/11w0c41FAgCqcV
Malware Config
Extracted
formbook
4.1
ud04
oum7.pro
ovonordisk.online
akrzus.pro
tendmtedcpsa.site
mm.foo
animevyhgsft29817.click
digdxxb.info
1130.vip
uy-now-pay-later-74776.bond
ybzert.online
edcn.link
rime-flow-bay.xyz
nd777id.beauty
otoyama.shop
lranchomx.xyz
unluoren.top
uglesang-troms.net
udulbet88.net
raquewear.shop
ijanarko.net
Targets
-
-
Target
list nr 001220_51_2024-11-19_134943.docx.exe
-
Size
1.1MB
-
MD5
93bfc296f24d789a7201194a62a84b00
-
SHA1
23871f9da18f3a7cbe4491fb0152f38b2c6cf959
-
SHA256
dcb0dbfb5714fc8d31fb3ac35f060092959f1450655eac659d6f4ff36c3c790d
-
SHA512
edb3cdf1e897ed07883548df5009d2a7dc5037871484f20e790701c29b0732016b1bf6834f712dc21b62d9b26834aafb6735bea54c4ed573c5be7151d68937df
-
SSDEEP
24576:htb20pkaCqT5TBWgNQ7aWcgLfFAJwGYBU6A:yVg5tQ7aWc6AJwvO5
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook family
-
Formbook payload
-
Suspicious use of SetThreadContext
-