formbook | 662454b411bcab1756c0be7a2d7ffd0587d9a3347b3f9235fc292132ede44752

General

Target

662454b411bcab1756c0be7a2d7ffd0587d9a3347b3f9235fc292132ede44752
Size

188KB
Sample

241125-2zy4gs1lfv
MD5

c10e79ef1a4b3a63580a43cf521ffe57
SHA1

b46247399f5c0af2b938d089b554ff84bb157e8a
SHA256

662454b411bcab1756c0be7a2d7ffd0587d9a3347b3f9235fc292132ede44752
SHA512

1e7e4c19807184cb44f5ffdce38094a648c80c3520322cf967e0c6f527546256bd0b43feb12915cca01629ebe3d9824f3a96b92acdd8f27f51532fc37e84a645
SSDEEP

3072:IfuEm9uOrI0m3tHON/vaB5YeGOOW4yJGG6LAaW/dIgF/:t60QtuNanrGOPrJv

Score

10^/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

sn72

Decoy

auntieannasboutique.com

bmvelectra.com

brightertaxes.com

jumpexit.com

drakorssi.com

greewino.com

fupinge.com

design-rostov61.ru

4455k.net

findmentalwealth.com

echadholisticbar.com

whrdyim.com

jabyrne.co.uk

entalem.com

efeflaunch.buzz

asty728.com

everydaysociallab.com

farmally.africa

2459731.com

iberostargrandsalome.com

Targets

- Target
  
  662454b411bcab1756c0be7a2d7ffd0587d9a3347b3f9235fc292132ede44752
- Size
  
  188KB
- MD5
  
  c10e79ef1a4b3a63580a43cf521ffe57
- SHA1
  
  b46247399f5c0af2b938d089b554ff84bb157e8a
- SHA256
  
  662454b411bcab1756c0be7a2d7ffd0587d9a3347b3f9235fc292132ede44752
- SHA512
  
  1e7e4c19807184cb44f5ffdce38094a648c80c3520322cf967e0c6f527546256bd0b43feb12915cca01629ebe3d9824f3a96b92acdd8f27f51532fc37e84a645
- SSDEEP
  
  3072:IfuEm9uOrI0m3tHON/vaB5YeGOOW4yJGG6LAaW/dIgF/:t60QtuNanrGOPrJv
Score

3^/10

discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2