General

  • Target

    cca24e246fc39ccf0dd510f1a5600a29806e9679ee1c752448942f11d71371c2N.exe

  • Size

    1.1MB

  • Sample

    241216-j6y3yssrel

  • MD5

    a6fb5e5006b9ff50a53acc5c526b5940

  • SHA1

    d2df10ffd3c153e780ebf83a2c57fc00f441fb8d

  • SHA256

    cca24e246fc39ccf0dd510f1a5600a29806e9679ee1c752448942f11d71371c2

  • SHA512

    2e82311c3714a60e471193e73506dd630505e31ad6a2dc407b615407dca97beadca7aa1dc15dc781d18ef02cacc57da1e9003b88e18721f76d74cb80958f2c8c

  • SSDEEP

    24576:Qu6J33O0c+JY5UZ+XC0kGso6Fal09T1Jr6WY:au0c++OCvkGs9FalKTlY

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

at22

Decoy

etween-us.online

sphaleia.net

ental-implants-78350.bond

q4a.lat

commerce-97292.bond

linds-curtains-38811.bond

gyptevoyages.net

landofigueroa-abogados.net

cuitis.xyz

hantom.city

yzk.online

afikabmedan.store

ome-remodeling-67289.bond

ebpage-klzdxrhnazi.shop

eject.lol

rismart.xyz

nfluencer-marketing-72407.bond

ksolotl.xyz

ebsbayrntilrmizin93.xyz

pps-75399.bond

Targets

    • Target

      cca24e246fc39ccf0dd510f1a5600a29806e9679ee1c752448942f11d71371c2N.exe

    • Size

      1.1MB

    • MD5

      a6fb5e5006b9ff50a53acc5c526b5940

    • SHA1

      d2df10ffd3c153e780ebf83a2c57fc00f441fb8d

    • SHA256

      cca24e246fc39ccf0dd510f1a5600a29806e9679ee1c752448942f11d71371c2

    • SHA512

      2e82311c3714a60e471193e73506dd630505e31ad6a2dc407b615407dca97beadca7aa1dc15dc781d18ef02cacc57da1e9003b88e18721f76d74cb80958f2c8c

    • SSDEEP

      24576:Qu6J33O0c+JY5UZ+XC0kGso6Fal09T1Jr6WY:au0c++OCvkGs9FalKTlY

MITRE ATT&CK Enterprise v15

Tasks