formbook

General

Target

6cddedafbaf4288abf28e2ba392414c385e7a003c822ea1b63109bf214e11994
Size

1.0MB
Sample

250203-agrsxavncq
MD5

882c3ded09b7eabc517ab9c93813ce56
SHA1

1cd8513f787c3dc074606c9b87a3fc61e3d5754f
SHA256

6cddedafbaf4288abf28e2ba392414c385e7a003c822ea1b63109bf214e11994
SHA512

324930cb22943bfdcbb30830c50c08daf0aa91037377406087273800a26f3d2930cb85fa915f30ca8ec89b27d788cbe4f8e2a0a51606821926647c0f0fc7642d
SSDEEP

24576:1AHnh+eWsN3skA4RV1Hom2KXFmIa4tRHyXzIdnhqK5:kh+ZkldoPK1Xa4/QUT

Score

10^/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

a38m

Decoy

rtfosters.net

ental-implants-97548.bond

raphic-design-degree-15820.bond

ompraninjas.shop

indmyusedcar.today

rumptraumasupport.net

uozwear.xyz

etron.xyz

dultlivebroadcast09.today

ypegen.net

arehouse-inventory-54057.bond

27961.pizza

ortable-ai.xyz

pioxc.xyz

nline-advertising-76059.bond

rendyshack.store

pa-services88.life

aftarpragmatic218gacor.online

yb1054.shop

8x189.xyz

Targets

- Target
  
  6cddedafbaf4288abf28e2ba392414c385e7a003c822ea1b63109bf214e11994
- Size
  
  1.0MB
- MD5
  
  882c3ded09b7eabc517ab9c93813ce56
- SHA1
  
  1cd8513f787c3dc074606c9b87a3fc61e3d5754f
- SHA256
  
  6cddedafbaf4288abf28e2ba392414c385e7a003c822ea1b63109bf214e11994
- SHA512
  
  324930cb22943bfdcbb30830c50c08daf0aa91037377406087273800a26f3d2930cb85fa915f30ca8ec89b27d788cbe4f8e2a0a51606821926647c0f0fc7642d
- SSDEEP
  
  24576:1AHnh+eWsN3skA4RV1Hom2KXFmIa4tRHyXzIdnhqK5:kh+ZkldoPK1Xa4/QUT
Score

10^/10

formbook a38m discovery rat spyware stealer trojan
- Formbook
  Formbook is a data stealing malware which is capable of stealing data.
  trojan spyware stealer formbook
- Formbook family
  formbook
- Formbook payload
  rat
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Formbook family

Formbook payload

Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2