Overview

overview

10

Static

static

3

KvG1NAXkgp9PxQb.exe

windows7-x64

10

KvG1NAXkgp9PxQb.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    KvG1NAXkgp9PxQb.exe

  • Size

    694KB

  • Sample

    241203-qb3k8askaj

  • MD5

    cf4274ca7587295567c667da6e1bd0e0

  • SHA1

    1e6f09bbb822019d3311f317688756d48d0d931a

  • SHA256

    3c49acaa8cecf8350267f1be98a72b3c3cc0ab537c0ddb99b20cb6d7e65b916b

  • SHA512

    c201dfabb87ef9252fe1124dc46bf3a6a0da685c87047e53a2d103c9f40c1992c245c168758c6286727150cc71ec20536945279a5d3360cf5ce8ced27ba324f5

  • SSDEEP

    12288:diIR4R52J+XtONxhwH7L8US0zA50ziWjBoAOIFSDhmAfUq/Wy9jwW7i5IjlMIR:diIeeDNwH7o+cW9oAbtAMq+y9GI

Score
10/10
formbookax19discoveryratspywarestealertrojan

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

ax19

Decoy

nmarklun.biz

eadithere.net

oytromcm.net

6gu536d.shop

hysicsjunction.online

esistivitysensors.net

ealthcare-software-53940.bond

tupid-edsee.cyou

614.lat

agmart.store

lothesthesale.store

ranopen.info

c1v.lat

owflyingbugs.online

undumimmobilien.net

nline-advertising-57252.bond

orktyper.net

kten10.shop

sadeaguia.net

ouseofnormal.party

Targets

    • Target

      KvG1NAXkgp9PxQb.exe

    • Size

      694KB

    • MD5

      cf4274ca7587295567c667da6e1bd0e0

    • SHA1

      1e6f09bbb822019d3311f317688756d48d0d931a

    • SHA256

      3c49acaa8cecf8350267f1be98a72b3c3cc0ab537c0ddb99b20cb6d7e65b916b

    • SHA512

      c201dfabb87ef9252fe1124dc46bf3a6a0da685c87047e53a2d103c9f40c1992c245c168758c6286727150cc71ec20536945279a5d3360cf5ce8ced27ba324f5

    • SSDEEP

      12288:diIR4R52J+XtONxhwH7L8US0zA50ziWjBoAOIFSDhmAfUq/Wy9jwW7i5IjlMIR:diIeeDNwH7o+cW9oAbtAMq+y9GI

    Score
    10/10
    formbookax19discoveryratspywarestealertrojan

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Formbook family

      formbook

    • Formbook payload

      rat

    • Deletes itself

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks