formbook

General

Target

7E3E815ABE2F87D670088DB321E77E591A29824D734877EB33D15A6DA25262B9
Size

1.1MB
Sample

250103-jnza1avkgy
MD5

ab51c2953feb4e79fa1bfc3e90b3384f
SHA1

30fc5dd917ce3361943866497ed231d875b84928
SHA256

7e3e815abe2f87d670088db321e77e591a29824d734877eb33d15a6da25262b9
SHA512

70438bd9ac9bcc5d74d346374bee261086549d40aba517f4df3bb1b7994d97a076e6683937237d7d6bbef4882106e6b9935d3e7572bb56b778ebc9f1a4d1230f
SSDEEP

24576:uRmJkcoQricOIQxiZY1iaCiFjlhrzIBuyW7JH/wT5:7JZoQrbTFZY1iaCEJEA7hY5

Score

10^/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

k94g

Decoy

nstandgoz.xyz

dhd-treatment-37310.bond

13s-braces-us-ze.fun

umdona.shop

96ph803ql.bond

kka9max.net

corporate-10.xyz

edicalassistance869840.online

lobalresources-bh.xyz

3145978.xyz

ovdaawebsite.online

etting-thailand.net

icloud.xyz

poxk.shop

25ks-ls72510.cyou

women.info

iwyrfbfvhv9.asia

luratu.xyz

ffordable-power-charger.today

edanuryilmaz.xyz

Targets

- Target
  
  7E3E815ABE2F87D670088DB321E77E591A29824D734877EB33D15A6DA25262B9
- Size
  
  1.1MB
- MD5
  
  ab51c2953feb4e79fa1bfc3e90b3384f
- SHA1
  
  30fc5dd917ce3361943866497ed231d875b84928
- SHA256
  
  7e3e815abe2f87d670088db321e77e591a29824d734877eb33d15a6da25262b9
- SHA512
  
  70438bd9ac9bcc5d74d346374bee261086549d40aba517f4df3bb1b7994d97a076e6683937237d7d6bbef4882106e6b9935d3e7572bb56b778ebc9f1a4d1230f
- SSDEEP
  
  24576:uRmJkcoQricOIQxiZY1iaCiFjlhrzIBuyW7JH/wT5:7JZoQrbTFZY1iaCEJEA7hY5
Score

10^/10

formbook k94g discovery rat spyware stealer trojan
- Formbook
  Formbook is a data stealing malware which is capable of stealing data.
  trojan spyware stealer formbook
- Formbook family
  formbook
- Formbook payload
  rat
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Formbook family

Formbook payload

Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2