Overview

overview

10

Static

static

3

12052024000.PDF.exe

windows7-x64

10

12052024000.PDF.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    12052024000.PDF.gz

  • Size

    566KB

  • Sample

    241206-s5yv8svlat

  • MD5

    506fc14cc7e7bb002de614420f8e72ce

  • SHA1

    e39e98666321637a7a933fa526d55b5df528b88c

  • SHA256

    2f4d7e1e8b7804f91b5cb9c12edf158749a5e1761f85af260fd034f3bc097519

  • SHA512

    37b61bb74a4e64ed2419552c3359399271a9343cb830dfbf0de8027ec5653aff38a5b673b3da9986b887210d08828c813824a2a1d76282203cb5590f0dbac3dc

  • SSDEEP

    12288:XAMuY8dIpIdkljrtzgKcMLEMPrsN5IqHXUB/Sh3Xxbq:XSmpyk3zPdLLrsPIqr9xbq

Score
10/10
formbookgd04discoveryratspywarestealertrojan

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

gd04

Decoy

f5u8utd50.icu

ob-offer-33304.bond

aaf.zone

hoppersrack.store

nline-gaming-33476.bond

isionaryvault.online

ilitary-jobs-88516.bond

iyxym.info

eyes.xyz

refle.xyz

kinsmonlkey.shop

oruu.shop

est2x2.online

nline-advertising-77889.bond

hepresspoolai.xyz

anilaberg.online

reimutigleben.store

anguage-courses-22450.bond

zzt.xyz

kfn.lat

Targets

    • Target

      12052024000.PDF.exe

    • Size

      616KB

    • MD5

      cc6d7728ecb9c30b5e2d64bc46f1005d

    • SHA1

      e9664338782ac9ffb910db3035c096da38707c70

    • SHA256

      c2d348685fd22dd3ef1f9c245e4f6d184ab457cc0f38ec7bf23b414a9f937457

    • SHA512

      05427c5c5ecaf383dc0a7af87877f1c69ebbdd53fc0656e8d3332c32717d937bb4ebb4ab905576e9990abbce7bf99288907a7e3c0de5219e593839e1bd8e8b6f

    • SSDEEP

      12288:GPG/NIp8R0Z5rtzgKcM5E4PPsNNII6iutz:VWpo0tz9d55PsnII6i2

    Score
    10/10
    formbookgd04discoveryratspywarestealertrojan

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Formbook family

      formbook

    • Formbook payload

      rat

    • Deletes itself

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks