General

  • Target

    SecuriteInfo.com.Heur.15150.29656.exe

  • Size

    1.1MB

  • Sample

    250630-xc1lkstqx2

  • MD5

    512dfb2af6bef3005f2bc07aaab78174

  • SHA1

    454af3a45f486390fea2e2a1d7bdb4f15c0a35e7

  • SHA256

    043ac7293202b1142c850106e891c5580c76403bfb84d35d11e831d9299e3046

  • SHA512

    9166040018d2dd3e892d6b22cdc4b6d7899fe4fb0aa7f314d1253f4c93dcb77131077ed698c702d766c25c5c46430fa5d62790eaa0b901b9f97eedc805e4abc3

  • SSDEEP

    24576:I5EmXFtKaL4/oFe5T9yyXYfP1ijXda6RHlK3Dj92x7f:IPVt/LZeJbInQRa6be92

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

ko23

Decoy

us82.top

sy739.top

aluxuryrealestate.homes

orven.live

tokia.cloud

etlemonlightsite.cfd

azeti.shop

ellowapp.xyz

uputamadre.xyz

pace-capsule-house.net

raftdistillery.xyz

aapcommerce.xyz

sotonic.xyz

odesigngurulabs.top

yhyqoeziut.pro

etr3water.click

atinca.pro

0sao.top

lvfun.top

qpi.shop

Targets

    • Target

      SecuriteInfo.com.Heur.15150.29656.exe

    • Size

      1.1MB

    • MD5

      512dfb2af6bef3005f2bc07aaab78174

    • SHA1

      454af3a45f486390fea2e2a1d7bdb4f15c0a35e7

    • SHA256

      043ac7293202b1142c850106e891c5580c76403bfb84d35d11e831d9299e3046

    • SHA512

      9166040018d2dd3e892d6b22cdc4b6d7899fe4fb0aa7f314d1253f4c93dcb77131077ed698c702d766c25c5c46430fa5d62790eaa0b901b9f97eedc805e4abc3

    • SSDEEP

      24576:I5EmXFtKaL4/oFe5T9yyXYfP1ijXda6RHlK3Dj92x7f:IPVt/LZeJbInQRa6be92

MITRE ATT&CK Enterprise v16

Tasks