formbook | 627a11b2b58ecb022e8b6265ee6ae75af96ec7693526c685947c10a631e43c0b

General

Target

627a11b2b58ecb022e8b6265ee6ae75af96ec7693526c685947c10a631e43c0b
Size

188KB
Sample

241221-tn15pssnby
MD5

2a581691297093ba3760826bc607c056
SHA1

8b39fac7df8507335c388890e3ecd6cb59625747
SHA256

627a11b2b58ecb022e8b6265ee6ae75af96ec7693526c685947c10a631e43c0b
SHA512

0e351a1d07626c7d084ad695dcb3501b9fc839f676df2f259e831be80d7129db536048bb04ca4d8eb7b9a909b0a84b7281e1a29b9b85b89b6373580973333bfc
SSDEEP

3072:tWyfkdF3HA9pjz13LIq+DPKCpDHBw2l2DLfVIb0fPnbLt5UXnB:U3+ZLXoKCpDH72nm0bb4nB

Score

10^/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

f63a

Decoy

iutk.pro

shrezrehkhan.com

2059westonroad43.com

lilianpaws.xyz

efanbruder.com

cmkane.net

wyrbk.site

payhere.today

clickiraq.com

huilv521.com

yougoodbook.com

extremeworkout.net

po-pokupki.com

sax371.com

kskc1996.net

explodata-solutions.com

piiqdigital.store

chattanooga.jewelry

wix-music.club

amazon-jpn0cs.com

Targets

- Target
  
  627a11b2b58ecb022e8b6265ee6ae75af96ec7693526c685947c10a631e43c0b
- Size
  
  188KB
- MD5
  
  2a581691297093ba3760826bc607c056
- SHA1
  
  8b39fac7df8507335c388890e3ecd6cb59625747
- SHA256
  
  627a11b2b58ecb022e8b6265ee6ae75af96ec7693526c685947c10a631e43c0b
- SHA512
  
  0e351a1d07626c7d084ad695dcb3501b9fc839f676df2f259e831be80d7129db536048bb04ca4d8eb7b9a909b0a84b7281e1a29b9b85b89b6373580973333bfc
- SSDEEP
  
  3072:tWyfkdF3HA9pjz13LIq+DPKCpDHBw2l2DLfVIb0fPnbLt5UXnB:U3+ZLXoKCpDH72nm0bb4nB
Score

3^/10

discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2