General
-
Target
6c875de6251ce65b8eea5f3c0583178cbeefb44393f164bd5c0a59473f14f431.iso
-
Size
1.6MB
-
Sample
250326-lxdf1awpt7
-
MD5
deff97d78ffe21ddbdd4e668f0d1b615
-
SHA1
13530661425ce41b29b3f80fcde2b12f84354e29
-
SHA256
6c875de6251ce65b8eea5f3c0583178cbeefb44393f164bd5c0a59473f14f431
-
SHA512
1cb2807621f044d2f57c2bfc990a7eb7f222f12314a29d711efb831186fd74d230f7751097e43602b79b6aec1f4b5cdf09ee3402411cf23070beec7f333a4db8
-
SSDEEP
24576:Cu6J33O0c+JY5UZ+XC0kGso6Faw/itkLQS49GSLwxS84WY:ku0c++OCvkGs9Faw/rf4AimSiY
Malware Config
Extracted
formbook
4.1
u021
pidersandsparrowsgroup.info
hatgptstrategies.net
anashekwrites.net
uskomaras-gyor.net
s2ega.live
heap-flights-1466962.fyi
ersondigital.shop
omaine-videlot.net
mbeddedcopilot.xyz
tp-jos178-a2.online
estaking888.xyz
uantumnovamind.pro
ugmentedmap.xyz
ucky-win-spin.xyz
bytxop.online
nnovativeworld.cyou
f.delivery
lp.cash
y-marketing-chef.online
illionblocks.xyz
Targets
-
-
Target
PL143_1400277334_2025032512033713_213128_00001..exe
-
Size
1.0MB
-
MD5
5f4861781f0ec977e51a8a86349c6f8b
-
SHA1
0565c7b0f212bddf7a379aaa6e9735eb1167dd57
-
SHA256
7e0b58f853b79da8504e524932bd2bfd5aabd42bd82f5f787176a615b45ffe22
-
SHA512
28a2c135f06bcb11fb48611aa2dbb5d5ef0aea61b6ba6f2da8bcfc892f0f91c86cefa776eb599d2bc16b317cde282baa84862c32ee54398aa9d8ba9cef9cc99a
-
SSDEEP
24576:lu6J33O0c+JY5UZ+XC0kGso6Faw/itkLQS49GSLwxS84WY:nu0c++OCvkGs9Faw/rf4AimSiY
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook family
-
Formbook payload
-
Suspicious use of SetThreadContext
-