formbook | b428443c3e4a35f5950a465a9b785c4ebab7394e17d526b1ecd4a87ec2474a63

General

Target

2468-14-0x0000000000400000-0x000000000042E000-memory.dmp
Size

184KB
Sample

250326-qms6xsxn16
MD5

745604e93415dc556dafd2133e994a20
SHA1

357b76b27e4a5d13160d7fb893fd8012f11eb223
SHA256

b428443c3e4a35f5950a465a9b785c4ebab7394e17d526b1ecd4a87ec2474a63
SHA512

b6900be53c5ec0df04afd033d1743cd8b007ef9c1b23e5dbcaae4e76f3936a584cf1c30b7b0dab22bc2666d11175a2c02b5522ab48ffb39eddfff27d6b868944
SSDEEP

3072:CmvIaTCFrq0dXI+Y/T5/9E/77H6JSRTE+ccwtWBnbidAvyDuW+dKCV:nTd0CN/9EzGJSRTE6cSnbidAvyDzGL

Score

10^/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

kk18

Decoy

ampbelltx.info

omovremont.store

haiyaoder.top

18y6s32s.top

ykbai.website

riwh.bid

iuzhou15.top

ibdobreva.art

onfitdentwithkat.net

ransitplus.biz

oymcfaddin.art

zzicasino-21.buzz

essonsandblessings.shop

antappecah001.mom

amilianm.store

ertbz.xyz

ajbke.shop

plate.online

roblemclassified.online

ewssphere.one

Targets

- Target
  
  2468-14-0x0000000000400000-0x000000000042E000-memory.dmp
- Size
  
  184KB
- MD5
  
  745604e93415dc556dafd2133e994a20
- SHA1
  
  357b76b27e4a5d13160d7fb893fd8012f11eb223
- SHA256
  
  b428443c3e4a35f5950a465a9b785c4ebab7394e17d526b1ecd4a87ec2474a63
- SHA512
  
  b6900be53c5ec0df04afd033d1743cd8b007ef9c1b23e5dbcaae4e76f3936a584cf1c30b7b0dab22bc2666d11175a2c02b5522ab48ffb39eddfff27d6b868944
- SSDEEP
  
  3072:CmvIaTCFrq0dXI+Y/T5/9E/77H6JSRTE+ccwtWBnbidAvyDuW+dKCV:nTd0CN/9EzGJSRTE6cSnbidAvyDzGL
Score

3^/10

discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2