General

  • Target

    New Order list.exe

  • Size

    1.0MB

  • Sample

    241125-arrkwsxrcx

  • MD5

    94e952368709ea0f851c04d75c9f3f15

  • SHA1

    91aadbc58776532de4970dd2a883078ba7e9794d

  • SHA256

    c7f7388cba691a5b5d8786804468d00489d228bc887f17768d26faf7df9c78ca

  • SHA512

    08ffe085061929d3b284caede17ceceb7ff4452f3b6349ce3ebc7e2657be06b0127de4c90297ed27c1a2b8b09f40d4fb39b56fc4deb3e978b91f120b4aeffac3

  • SSDEEP

    24576:Htb20pkaCqT5TBWgNQ7aQu/BOw1+n2VsldryZ6A:EVg5tQ7aQKB107l5C5

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

ge07

Decoy

amyard.shop

eloshost.xyz

g18q11a.top

orensic-vendor-735524320.click

ithin-ksvodn.xyz

xhyx.top

elonix-traceglow.pro

cillascrewedsedroth.cfd

wner-nyquh.xyz

reyhazeusa.shop

esmellretaperetotal.cfd

hqm-during.xyz

pipagtxcorrelo.xyz

lray-civil.xyz

apybarameme.xyz

rbuds.shop

hild-fcudh.xyz

rkgexg.top

estwestcottwines.shop

giyztm.xyz

Targets

    • Target

      New Order list.exe

    • Size

      1.0MB

    • MD5

      94e952368709ea0f851c04d75c9f3f15

    • SHA1

      91aadbc58776532de4970dd2a883078ba7e9794d

    • SHA256

      c7f7388cba691a5b5d8786804468d00489d228bc887f17768d26faf7df9c78ca

    • SHA512

      08ffe085061929d3b284caede17ceceb7ff4452f3b6349ce3ebc7e2657be06b0127de4c90297ed27c1a2b8b09f40d4fb39b56fc4deb3e978b91f120b4aeffac3

    • SSDEEP

      24576:Htb20pkaCqT5TBWgNQ7aQu/BOw1+n2VsldryZ6A:EVg5tQ7aQKB107l5C5

MITRE ATT&CK Enterprise v15

Tasks