formbook | b4d5ce893681d69ab804bc9355551dbe6f4620ae49fbf5c3964a8a02508f85d1

General

Target

JaffaCakes118_b4d5ce893681d69ab804bc9355551dbe6f4620ae49fbf5c3964a8a02508f85d1
Size

188KB
Sample

241224-bawc7axjht
MD5

bc50be7f993a0dee4dcc2b32a46084ca
SHA1

6e080876943d11a11da62a29f08799d724781fa5
SHA256

b4d5ce893681d69ab804bc9355551dbe6f4620ae49fbf5c3964a8a02508f85d1
SHA512

77cdb0823d1af55c3b611631660973e5527157a069638fe65864bc76251fbad41f5585d0a4ce46d6a9bf10f46bc7944eb3adf4a1ffd592cb20b76abb6d30bb11
SSDEEP

3072:EuFLksPmIeHt3RyDAOvKl7ddVoct9tTDqP6koezEFX/4lSn:jkhRkAiKl7ddmcNqrhO/L

Score

10^/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

s20a

Decoy

kingdomscouncil.com

calavera.ink

99bds.com

newbetsites.com

foldandrelax.com

liumilac.com

hightidestattoo.com

hoschtonplumbers.com

deoranjewinter.com

awinterart.com

zmpeudz.icu

jsemw105.com

landrover-africa.com

371018.com

mhasale.com

philipmawford.com

acorn97.com

kexin158.com

dxhjtsq.com

lekarbg.com

Targets

- Target
  
  JaffaCakes118_b4d5ce893681d69ab804bc9355551dbe6f4620ae49fbf5c3964a8a02508f85d1
- Size
  
  188KB
- MD5
  
  bc50be7f993a0dee4dcc2b32a46084ca
- SHA1
  
  6e080876943d11a11da62a29f08799d724781fa5
- SHA256
  
  b4d5ce893681d69ab804bc9355551dbe6f4620ae49fbf5c3964a8a02508f85d1
- SHA512
  
  77cdb0823d1af55c3b611631660973e5527157a069638fe65864bc76251fbad41f5585d0a4ce46d6a9bf10f46bc7944eb3adf4a1ffd592cb20b76abb6d30bb11
- SSDEEP
  
  3072:EuFLksPmIeHt3RyDAOvKl7ddVoct9tTDqP6koezEFX/4lSn:jkhRkAiKl7ddmcNqrhO/L
Score

3^/10

discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2