General
-
Target
PL147_1400277334_2025032512033713_213128_00011.ISO
-
Size
1.6MB
-
Sample
250325-ywvp4svqw7
-
MD5
2b0c7e3a0eebde921dfb16e93fd67fed
-
SHA1
6619ad1ac1350f9dd35d509172c0a131d17b6421
-
SHA256
dcb17b967ace504da2bf735bff143773f4ea2f8c88f1414176e50e25330d32d5
-
SHA512
6f91de94aaeb6fbc8545661bfb03ce224c2caadfdaa7e15fab7fd6d267bb1a7deabefdc0b9ddcea71e4744f80606e38e0b3ef276e22ea3baffced0fa4c7f5854
-
SSDEEP
24576:8u6J33O0c+JY5UZ+XC0kGso6FaiSceWSo4rlgaG+WY:mu0c++OCvkGs9FaiSDWSZRmY
Malware Config
Extracted
formbook
4.1
u021
pidersandsparrowsgroup.info
hatgptstrategies.net
anashekwrites.net
uskomaras-gyor.net
s2ega.live
heap-flights-1466962.fyi
ersondigital.shop
omaine-videlot.net
mbeddedcopilot.xyz
tp-jos178-a2.online
estaking888.xyz
uantumnovamind.pro
ugmentedmap.xyz
ucky-win-spin.xyz
bytxop.online
nnovativeworld.cyou
f.delivery
lp.cash
y-marketing-chef.online
illionblocks.xyz
Targets
-
-
Target
PL147_1400277334_2025032512033713_213128_00011..exe
-
Size
1.0MB
-
MD5
e33bfd34504c633900fdf1ce3155864d
-
SHA1
b31f64301f2e6804d29693732c05fef887646aca
-
SHA256
be65438fc6249ed80d90b22c1a4308d85c77ca1c0c4bd5376baa4622d4c1f161
-
SHA512
ec0632806bd6127ee9a19a1a35432b9d38bc4c68bb7e9d8a3ae7e5cad0da51e27d6e4e07091a432ca4ff3a79dc0c5c3f6a446c2c7a7e08ab2c9096ad6475c48e
-
SSDEEP
24576:Pu6J33O0c+JY5UZ+XC0kGso6FaiSceWSo4rlgaG+WY:5u0c++OCvkGs9FaiSDWSZRmY
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook family
-
Formbook payload
-
Suspicious use of SetThreadContext
-