General

  • Target

    1ddd6b7f64ff57668ca9087e77362e4d11fda7c3c07aebe6c1f48b560aea038e.exe

  • Size

    1.0MB

  • Sample

    241214-cshqgsvkhk

  • MD5

    58923ab5edc1d65d3f0fb3c71ee2af64

  • SHA1

    5de29822b230043708b6725b3fe0e9f2eb1ad21a

  • SHA256

    1ddd6b7f64ff57668ca9087e77362e4d11fda7c3c07aebe6c1f48b560aea038e

  • SHA512

    d8c28559e79783cccbb9b2fac8c3a2b29471b87035c326be203ab486c62df8a6b7a59c4ecffe87cea6e201fc825274faa6b3befe7a3a735f154d567abbb09b32

  • SSDEEP

    24576:mu6J33O0c+JY5UZ+XC0kGso6FatnXQN8TyT1soHDWY:ou0c++OCvkGs9FatgaTusoiY

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

at22

Decoy

etween-us.online

sphaleia.net

ental-implants-78350.bond

q4a.lat

commerce-97292.bond

linds-curtains-38811.bond

gyptevoyages.net

landofigueroa-abogados.net

cuitis.xyz

hantom.city

yzk.online

afikabmedan.store

ome-remodeling-67289.bond

ebpage-klzdxrhnazi.shop

eject.lol

rismart.xyz

nfluencer-marketing-72407.bond

ksolotl.xyz

ebsbayrntilrmizin93.xyz

pps-75399.bond

Targets

    • Target

      1ddd6b7f64ff57668ca9087e77362e4d11fda7c3c07aebe6c1f48b560aea038e.exe

    • Size

      1.0MB

    • MD5

      58923ab5edc1d65d3f0fb3c71ee2af64

    • SHA1

      5de29822b230043708b6725b3fe0e9f2eb1ad21a

    • SHA256

      1ddd6b7f64ff57668ca9087e77362e4d11fda7c3c07aebe6c1f48b560aea038e

    • SHA512

      d8c28559e79783cccbb9b2fac8c3a2b29471b87035c326be203ab486c62df8a6b7a59c4ecffe87cea6e201fc825274faa6b3befe7a3a735f154d567abbb09b32

    • SSDEEP

      24576:mu6J33O0c+JY5UZ+XC0kGso6FatnXQN8TyT1soHDWY:ou0c++OCvkGs9FatgaTusoiY

MITRE ATT&CK Enterprise v15

Tasks