General

  • Target

    prtprr.exe

  • Size

    851KB

  • Sample

    241210-pc6htsvnfw

  • MD5

    95a22e4bce7bd0a47c94cb47cb7e2d3a

  • SHA1

    6d4efe018df36424c66b4a7337b2045fe2c8c03e

  • SHA256

    79381309c066a4ff2476a0ac2801964f5a82c4f886b590f56e4cfc5ceb307040

  • SHA512

    9b6e5b3ccca79f9847a4ebf27eb5eebeec5ba9988704ce863a30733fb5b7fb953d4769cb411f70bde387d89e7f75e7a9a2ca31c576a634c8a9b374ddbb7313bb

  • SSDEEP

    12288:rLkcoxg7v3qnC11ErwIhh0F4qwUgUny5QLJoEanOS/H0Rvg/oh8qv60n:ffmMv6Ckr7Mny5QLJoEYOS/URvg/oY6

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

cl21

Decoy

0001.shop

earch-parttimejobs.today

are888.top

akanhaunthipped.shop

othing-heyu.xyz

cadvirsor.net

nclanalae.shop

lectric-cars-mexico.today

oxj-question.xyz

ersonalloanoffers.today

ersonalloans-fo54-fo37.click

verybody-ewfx.xyz

ercuremontauban.media

azilimdunyam.net

airs-clinicato.today

wiftsscend.click

ertainly-jbws.xyz

8xeng.app

damekadmitageable.cfd

ollapsedec.shop

Targets

    • Target

      prtprr.exe

    • Size

      851KB

    • MD5

      95a22e4bce7bd0a47c94cb47cb7e2d3a

    • SHA1

      6d4efe018df36424c66b4a7337b2045fe2c8c03e

    • SHA256

      79381309c066a4ff2476a0ac2801964f5a82c4f886b590f56e4cfc5ceb307040

    • SHA512

      9b6e5b3ccca79f9847a4ebf27eb5eebeec5ba9988704ce863a30733fb5b7fb953d4769cb411f70bde387d89e7f75e7a9a2ca31c576a634c8a9b374ddbb7313bb

    • SSDEEP

      12288:rLkcoxg7v3qnC11ErwIhh0F4qwUgUny5QLJoEanOS/H0Rvg/oh8qv60n:ffmMv6Ckr7Mny5QLJoEYOS/URvg/oY6

MITRE ATT&CK Enterprise v15

Tasks