formbook | bc8cabab3ec65da43b8c3e708ed9f9745757523041ef62e450b6fea48fae50e1

General

Target

JaffaCakes118_bc8cabab3ec65da43b8c3e708ed9f9745757523041ef62e450b6fea48fae50e1
Size

188KB
Sample

241225-az4kesskfv
MD5

dac650b23c4aba94eaf5caaeead3319c
SHA1

229458c66c9555a3d61ae980708357f093c5e6b8
SHA256

bc8cabab3ec65da43b8c3e708ed9f9745757523041ef62e450b6fea48fae50e1
SHA512

a6cdb8b8944686f87afb3763d37774d98b4f05ad7ee694490d67c4e00f007ffab33b02f006b0e782ee67be085b97183d0020181621d879c80463669efd407bb5
SSDEEP

3072:s7T36kvufOHM33RKA9qEaG6kOGEqp4TEgJHd8JhUw:WkHRT95aG6kJEgZgJuh

Score

10^/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

w6ya

Decoy

auden-audio.com

zombieodyssey.com

hdpthg.com

toddtechnical.com

njsdgz.com

yieldfarm.world

guardsveirfynews.net

atmamandir.info

eskisehirtostcusu.online

arrozz.net

v99king.win

jaxonboxing.com

morganevans.net

syandeg.com

valleyofplants.com

corsosportorico.com

tak.support

blacktgpc.com

herdpetshop.com

iifkvhns.xyz

Targets

- Target
  
  JaffaCakes118_bc8cabab3ec65da43b8c3e708ed9f9745757523041ef62e450b6fea48fae50e1
- Size
  
  188KB
- MD5
  
  dac650b23c4aba94eaf5caaeead3319c
- SHA1
  
  229458c66c9555a3d61ae980708357f093c5e6b8
- SHA256
  
  bc8cabab3ec65da43b8c3e708ed9f9745757523041ef62e450b6fea48fae50e1
- SHA512
  
  a6cdb8b8944686f87afb3763d37774d98b4f05ad7ee694490d67c4e00f007ffab33b02f006b0e782ee67be085b97183d0020181621d879c80463669efd407bb5
- SSDEEP
  
  3072:s7T36kvufOHM33RKA9qEaG6kOGEqp4TEgJHd8JhUw:WkHRT95aG6kJEgZgJuh
Score

3^/10

discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2