General
-
Target
ba1e3ff4198ba5dbb009b9f283e0a0b47a0f8fe811b982a2bbeb91feb885f7a2
-
Size
614KB
-
Sample
241204-qllepawpdy
-
MD5
9d09c5c9e0900b702b140f4879f74c03
-
SHA1
35c432700077e2403cc0edfd9e81e17c014afdc2
-
SHA256
ba1e3ff4198ba5dbb009b9f283e0a0b47a0f8fe811b982a2bbeb91feb885f7a2
-
SHA512
4a2c3a459928747f52120c198d6874a4fff999176048b59485595baa7739774cb5752d59beb843b3400dc66c36ca2d78849c1b040fdbd8cdd96f2bce114d7f27
-
SSDEEP
12288:RjEZ+23c6+L8QoZQaPss+J3h2h7o1LWS7lt+jVjqW0:RYZ+23dONLaPssay7oRfYjct
Malware Config
Extracted
formbook
4.1
o05p
ack-space.info
ixrecibeypaga.store
indmy-fr.info
atrottenondal.site
cenz16042.vip
elbournecakes.online
5gy2j62g9q.top
3anhbra.top
8c.top
ozhnoli.store
ichmanwillbe.shop
nfluencer-marketing-53327.bond
nnovationex.net
osleedn-bogatr.online
oorandco.store
atesb4dates.online
asryall.net
0zm.lat
ytorc.online
ariin.online
Targets
-
-
Target
Swift_0034.exe
-
Size
839KB
-
MD5
3209a5b655a33cd4e47a2c84dfa269fd
-
SHA1
5fac1974104f2262e735234389fb4b0642cde8f5
-
SHA256
2cf2d0b164f90f01162d60b8850225d4f142a5bbca39dc61571ab071ef3dc4b0
-
SHA512
c2adc85099db6bd37739336aabddd7a116701e3a048df5f406a9d061d37c72044a70a0fa0bf4fec258fc20e563968f1119b36e514ae965687707ffb32bc54b67
-
SSDEEP
12288:OqpZsSqXeHPyVeFalhuh7kZ+/UY/ib4011:OqzsaceFas7kJXv
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook family
-
Formbook payload
-
Suspicious use of SetThreadContext
-