formbook | 753a064bd523e78a831fb8e76ebf21e415d53d64ef15e1844a8e3e16186e2a40

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Trojan-Spy.Win32.Noon.jfv.b668a274c70913203fed65842f8c9df4
Size 496KB
Sample261006-vp12rssvbz
SHA256 753a064bd523e78a831fb8e76ebf21e415d53d64ef15e1844a8e3e16186e2a40
MD5 b668a274c70913203fed65842f8c9df4
SHA1 3989f90a97db0fd32ab2e33a2f17ed07e2ce4ed4
SHA512 68f996e2c9e252adf9fea5c5d14c04f11d488b6676855eb67cd9bdb45bcb6787696896faf68884bc395be1cf40170baa096c812b0729148ad45e8221538a70e1
SSDEEP 6144:FE3BEnQmNl8z74daPAq3jfRV8JJqjnT5xvpaaLNAtnfJ3qIiOmGSaGS:FERlmDa4kIq3jf4JJqbT3BaEd
TLSH
T161B4F1B98F5A8F92E61C1B748B60B17CCD0B1DF06DE69A0F9583B48397F07925430A5B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Extracted

Family

formbook

Version

Campaign

Decoy

fiint.net
bluediscover.com
passives-einkommen-tipps.com
happysingleparents.com
andrea-custom-apparel.com
dorogoi.win
fountainofeducation.info
leptcdiklat.com
portaltovirtualreality.com
getmore.credit
electrrichp.com
ibizapassage.win
talkwithkyle.com
placegeo.com
cantinasangria.wine
mmddweb.com
1737cai.com
tjfxkj.com
novinbatteryco.com
lapdogs.online
forewarnedprofessional.com
azhiai.com
midwestli.net
braidvets.com
zianquan.com
buildingproductsconsultancy.com
xn--o9jm048um5az55bij1c.com
myplaceholder.site
sports8.biz
longjingbi.com
jeanne-tai.com
kimsprettygirls.com
vgllw.com
nblot.com
onlinetechwhitelabel.com
novanailssandiego.com
76dallasavenue-hughesdale.com
monkyfarm.com
7shifts.support
edmedicines.net
cabo-cafe.com
juttdakharak.site
involo.agency
invisibleas.com
bpgpzd.info
bankitas.com
dirt.haus
whats-on-hot.men
shopciclemn.com
18sinden.com
streaminghd.agency
charible.biz
smb.mba
digital-monster.ltd
watch-garden.com
702photos.com
myeczemarecovery.com
allistar-academy.com
sim-only.info
shoponly7.com
notodoesperfecto.com
smbazhuayu.com
greenwoodring.store
sa-3ed9s-fti1-9w5.com
cumswart.com

Targets

- Target
  jaffacakes118_Trojan-Spy.Win32.Noon.jfv.b668a274c70913203fed65842f8c9df4
- Size 496KB
- SHA256 753a064bd523e78a831fb8e76ebf21e415d53d64ef15e1844a8e3e16186e2a40
- MD5 b668a274c70913203fed65842f8c9df4
- SHA1 3989f90a97db0fd32ab2e33a2f17ed07e2ce4ed4
- SHA512 68f996e2c9e252adf9fea5c5d14c04f11d488b6676855eb67cd9bdb45bcb6787696896faf68884bc395be1cf40170baa096c812b0729148ad45e8221538a70e1
- SSDEEP 6144:FE3BEnQmNl8z74daPAq3jfRV8JJqjnT5xvpaaLNAtnfJ3qIiOmGSaGS:FERlmDa4kIq3jf4JJqbT3BaEd
- TLSH
  T161B4F1B98F5A8F92E61C1B748B60B17CCD0B1DF06DE69A0F9583B48397F07925430A5B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

dea discovery formbook rat spyware stealer trojan
- Family: Formbook
  Formbook is a data stealing malware which is capable of stealing data.
  trojan spyware stealer formbook
- Formbook payload
  rat
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Family: Formbook

Formbook payload

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2