Overview

overview

10

Static

static

5

SHIPPING DOCS.exe

windows7-x64

3

SHIPPING DOCS.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SHIPPING DOCS.exe

  • Size

    849KB

  • Sample

    241219-ry17cavlep

  • MD5

    5a64804962a10779c0719950f5345b89

  • SHA1

    2321320b07502e61282a725863db63b2caedb17b

  • SHA256

    e08ad43582a8131754e852588855dcf229592e9916d85fd83bcf87ec606be50e

  • SHA512

    507d5425bbd63cbde0d5bd6dc319e70efc96c160555cd285b57c46f549cbc112f743af395acc27ae08119736dcffd54a7482426d8aff7aa0bb2982bab3457445

  • SSDEEP

    12288:rLkcoxg7v3qnC11ErwIhh0F4qwUgUny5QLjh1ikm8Cy+A3/CFMZHgqB2O:ffmMv6Ckr7Mny5QLjzikLj73qFMZHj

Score
10/10
formbookge07discoveryratspywarestealertrojan

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

ge07

Decoy

amyard.shop

eloshost.xyz

g18q11a.top

orensic-vendor-735524320.click

ithin-ksvodn.xyz

xhyx.top

elonix-traceglow.pro

cillascrewedsedroth.cfd

wner-nyquh.xyz

reyhazeusa.shop

esmellretaperetotal.cfd

hqm-during.xyz

pipagtxcorrelo.xyz

lray-civil.xyz

apybarameme.xyz

rbuds.shop

hild-fcudh.xyz

rkgexg.top

estwestcottwines.shop

giyztm.xyz

Targets

    • Target

      SHIPPING DOCS.exe

    • Size

      849KB

    • MD5

      5a64804962a10779c0719950f5345b89

    • SHA1

      2321320b07502e61282a725863db63b2caedb17b

    • SHA256

      e08ad43582a8131754e852588855dcf229592e9916d85fd83bcf87ec606be50e

    • SHA512

      507d5425bbd63cbde0d5bd6dc319e70efc96c160555cd285b57c46f549cbc112f743af395acc27ae08119736dcffd54a7482426d8aff7aa0bb2982bab3457445

    • SSDEEP

      12288:rLkcoxg7v3qnC11ErwIhh0F4qwUgUny5QLjh1ikm8Cy+A3/CFMZHgqB2O:ffmMv6Ckr7Mny5QLjzikLj73qFMZHj

    Score
    10/10
    discoveryformbookge07ratspywarestealertrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks