General

  • Target

    3500887776pdf.r15.rar

  • Size

    597KB

  • Sample

    241129-hrg1fs1qdt

  • MD5

    9eb4bd17e23823312ab73872b4eb3e97

  • SHA1

    73c8f96c9fa8bab1e7963b67d7a53ec955a7d7bb

  • SHA256

    7efa60e285e197bda5dfaea446f3288d9227725fe5e6f4f36731628585c23ff4

  • SHA512

    4f39d241fd2dc97f3f2be5b8e7ccd9fb0563d7dcef35ac0b675da2400149754208b413a87a211d6f4fa3cee2bf4fa9360ae341ab61ee87552021e67bfe6ba5c0

  • SSDEEP

    12288:GHxdeJMMR8AoZDyX7hjfzm5TiYo9VfC8v6uXWtzmAurlt7imO5Xewwr3:GfeJMhhFu9WGYo+XuGtzmrrji2D3

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

cl21

Decoy

0001.shop

earch-parttimejobs.today

are888.top

akanhaunthipped.shop

othing-heyu.xyz

cadvirsor.net

nclanalae.shop

lectric-cars-mexico.today

oxj-question.xyz

ersonalloanoffers.today

ersonalloans-fo54-fo37.click

verybody-ewfx.xyz

ercuremontauban.media

azilimdunyam.net

airs-clinicato.today

wiftsscend.click

ertainly-jbws.xyz

8xeng.app

damekadmitageable.cfd

ollapsedec.shop

Targets

    • Target

      eeertttttttt.exe

    • Size

      1.1MB

    • MD5

      09297b4f56dc12e62c275f5f6b1be047

    • SHA1

      d81acad6f198114321e3e875b9af0587d5fe6903

    • SHA256

      445c05ab18917bcc80fe2e712ead44f6452ed03a4d06d0200d6e3cbf434997c3

    • SHA512

      58c6def5651c8f7536fc20b0d6eb60139a44c4951f7705711d30ddb383f42c4c67fcc24e461c2958c0780f480a766bf5a93bd34d0febdb5eefbc51ddb056234d

    • SSDEEP

      24576:ktb20pkaCqT5TBWgNQ7ajAHvAxlZafyBMP/6A:NVg5tQ7ajaorUqBM35

MITRE ATT&CK Enterprise v15

Tasks