formbook

General

Target

JaffaCakes118_43185ba5682dbd5b9a4aeefd052f2ba7
Size

483KB
Sample

250107-ar78msxncj
MD5

43185ba5682dbd5b9a4aeefd052f2ba7
SHA1

9fb2ca5d4998c28ed9637e7f8c62e001a4a262d1
SHA256

ddcee2fa36f568c004181f3d91b4b75eeb935a28e9b5a3d32d1c0fd78be4fa70
SHA512

b7f148d97395b0ad4ba5dc0166d6e0c15df1514763a367c5518f0df771b64dee9f411a9bc295acec0a07b27d58d639704488a2c93531c5f34fa227449aba2ad0
SSDEEP

6144:fYG1f456Uqd2GhNAqwisAnIikwTc0gIlokyp3I5a5Kx81wHadqMWp/19SORt:QhAUi2iNA1AIikNqp15anwHadZWTL

Score

10^/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

jy0b

Decoy

lamejorimagen.com

mykabukibrush.com

modgon.com

barefoottherapeutics.com

shimpeg.net

trade-sniper.com

chiangkhancityhotel.com

joblessmoni.club

stespritsubways.com

chico-group.com

nni8.xyz

searchtypically.online

jobsyork.com

bestsales-crypto.com

iqmarketing.info

bullcityphotobooths.com

fwssc.icu

1oc87s.icu

usdiesel.xyz

secrets2optimumnutrition.com

Targets

- Target
  
  JaffaCakes118_43185ba5682dbd5b9a4aeefd052f2ba7
- Size
  
  483KB
- MD5
  
  43185ba5682dbd5b9a4aeefd052f2ba7
- SHA1
  
  9fb2ca5d4998c28ed9637e7f8c62e001a4a262d1
- SHA256
  
  ddcee2fa36f568c004181f3d91b4b75eeb935a28e9b5a3d32d1c0fd78be4fa70
- SHA512
  
  b7f148d97395b0ad4ba5dc0166d6e0c15df1514763a367c5518f0df771b64dee9f411a9bc295acec0a07b27d58d639704488a2c93531c5f34fa227449aba2ad0
- SSDEEP
  
  6144:fYG1f456Uqd2GhNAqwisAnIikwTc0gIlokyp3I5a5Kx81wHadqMWp/19SORt:QhAUi2iNA1AIikNqp15anwHadZWTL
Score

10^/10

formbook jy0b discovery rat spyware stealer trojan
- Formbook
  Formbook is a data stealing malware which is capable of stealing data.
  trojan spyware stealer formbook
- Formbook family
  formbook
- Formbook payload
  rat
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Formbook family

Formbook payload

Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2