General

  • Target

    bf9ad92f64bef520169526646d87ba455cd0a445dd3eed335cf621475ab9d300.exe

  • Size

    373KB

  • Sample

    241124-e7gg3szrcm

  • MD5

    098bdeedb52a2d4ed8a1de69968b82a2

  • SHA1

    1f590e44603ab96c1f7a8cfc180f13d7dd2f8dc4

  • SHA256

    bf9ad92f64bef520169526646d87ba455cd0a445dd3eed335cf621475ab9d300

  • SHA512

    08652d74f82040d62528ab844318c51fecb997458b58147cb16f9e701bd8ed2630acb7277069638ac57cedfde5a56c2d05b361095cc1ba99f3d9f0669c4d3cf9

  • SSDEEP

    6144:RyTMZytLYi08L8YnFfBXsOBrFtHrnObhcTm1PjyXnKI6/va6XWgA5Dyh10FNL:iMtBtGBc0rFtHrO6Tm1Ly56/vaXxyKJ

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

kzk9

Decoy

tianconghuo.club

1996-page.com

ourtownmax.net

conservativetreehose.com

synth.repair

donnachicacreperia.com

tentfull.com

weapp.download

surfersink.com

gattlebusinessservices.com

sebastian249.com

anhphuc.company

betternatureproducts.net

defroplate.com

seattlesquidsquad.com

polarjob.com

lendingadvantage.com

angelsondope.com

goportjitney.com

tiendagrupojagr.com

Targets

    • Target

      bf9ad92f64bef520169526646d87ba455cd0a445dd3eed335cf621475ab9d300.exe

    • Size

      373KB

    • MD5

      098bdeedb52a2d4ed8a1de69968b82a2

    • SHA1

      1f590e44603ab96c1f7a8cfc180f13d7dd2f8dc4

    • SHA256

      bf9ad92f64bef520169526646d87ba455cd0a445dd3eed335cf621475ab9d300

    • SHA512

      08652d74f82040d62528ab844318c51fecb997458b58147cb16f9e701bd8ed2630acb7277069638ac57cedfde5a56c2d05b361095cc1ba99f3d9f0669c4d3cf9

    • SSDEEP

      6144:RyTMZytLYi08L8YnFfBXsOBrFtHrnObhcTm1PjyXnKI6/va6XWgA5Dyh10FNL:iMtBtGBc0rFtHrO6Tm1Ly56/vaXxyKJ

MITRE ATT&CK Enterprise v15

Tasks