formbook | 68fd1d6e348522862f0fa03ad0f6a409187e8df6f6648f59b6fb240201466d98 | Triage

Sharing

General

Target

JaffaCakes118_68fd1d6e348522862f0fa03ad0f6a409187e8df6f6648f59b6fb240201466d98
Size

370KB
Sample

241230-d169gswrav
MD5

83ac38884d114d3b7660a3c814e4a1de
SHA1

fc4c1e74bd261a0a0ae8eb730f1b7646b176d510
SHA256

68fd1d6e348522862f0fa03ad0f6a409187e8df6f6648f59b6fb240201466d98
SHA512

3037f19ef4e60b7e8f214388d4d9f04b97fe157e170af722040a441dba7a249f0ff4f3c5b7e95c7d014fc23931beaf9a6ac89baebaec97de9c6d9b2b8f6f2ccf
SSDEEP

3072:+0MLkeup2nxgIpe3eOiHmu2YqO6VOYQLsTDioE1kvIF9gmw1X/b:T6fp4e17qOKOPIi91kgvgLX/

Score

10^/10

formbook execution rat

Malware Config

Targets

- Target
  
  JaffaCakes118_68fd1d6e348522862f0fa03ad0f6a409187e8df6f6648f59b6fb240201466d98
- Size
  
  370KB
- MD5
  
  83ac38884d114d3b7660a3c814e4a1de
- SHA1
  
  fc4c1e74bd261a0a0ae8eb730f1b7646b176d510
- SHA256
  
  68fd1d6e348522862f0fa03ad0f6a409187e8df6f6648f59b6fb240201466d98
- SHA512
  
  3037f19ef4e60b7e8f214388d4d9f04b97fe157e170af722040a441dba7a249f0ff4f3c5b7e95c7d014fc23931beaf9a6ac89baebaec97de9c6d9b2b8f6f2ccf
- SSDEEP
  
  3072:+0MLkeup2nxgIpe3eOiHmu2YqO6VOYQLsTDioE1kvIF9gmw1X/b:T6fp4e17qOKOPIi91kgvgLX/
Score

3^/10

execution
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2