formbook | 62422bcc87eb927bf099b3421f048bd09e43507aabfa7e4fb6a269aa8719b47f

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Trojan-Spy.Win32.Noon.jhf.68428a57f2187e093c3a46ee4eba8e1b
Size 828KB
Sample261006-vp7jjsbs8x
SHA256 62422bcc87eb927bf099b3421f048bd09e43507aabfa7e4fb6a269aa8719b47f
MD5 68428a57f2187e093c3a46ee4eba8e1b
SHA1 24ea4c6b9bb07a6f67feabb574842a3033465806
SHA512 e3fe1a5be01b2034dc8682f0208c63d08e1269b5feebe913013744d19fbad0ec59d439db5aa2d0742c7fd9f0ef68c35046dd4e6126c5234b75778662586ed9bc
SSDEEP 6144:Z6cRrX9ijOzZZcRZhl9KJICL3NZCvYKuXSiUMOtXPYKvZjf5d3X8vfbWa1G:Z6POzfcRZhzQRavY9XLQ1Nd
TLSH
T10D05DF16F03D8028E2A29774DC48E2B1496A7C6DECA788CB71E77F0F3571996D923B05
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

formbook ra discovery rat spyware stealer trojan

Malware Config

Extracted

Family

formbook

Version

Campaign

Decoy

mgsaborvenezolano.com
addenly.info
wfsongfeng.com
friendlymerch.com
elaineharding.com
robinarora.live
wklifestyle.com
villaimago.net
quantumbeacon.com
renewedbydesign.com
guiaguarulhos.com
alcoveandco.com
herschelbooks.com
clientsfw.com
ihavebeentomars.com
original-clip.com
tannia.com
mbeaumontevents.com
wwwb36516.com
sharedcdn.com
callcornerstone.net
sarabevinslimited.com
www139706.com
reddragonsmma.com
e66pq4u.info
358fencing.com
josefinasalgado.com
abacuscentreforexcellence.com
ytwanyao.com
4d97.com
yhisorz.com
press-tools.tech
eappleid.com
bippustyle.com
tclnzy.com
vall.ltd
metztlicoatl.com
theswirladvocate.group
purplepatch.world
michellehartexperience.com
loeyle-sapporo.com
abieastcoast.com
theinternetgold.biz
millionaire-dates.com
sindesc.com
pochtalon.com
alfircomer.com
tv16425.info
zhuomeizhuangshi.com
nidlova.com
lafargehalcim.com
thewsjunkdston.win
jaiuneinfo.biz
computer-mainz.services
jlsecuritiyagency.com
3araleeplace-brightoneast.com
dasksha.com
centropsicologic.com
f2player.com
buybythepallet.com
melbevent.net
high-endgraphics.com
radiose7efm.com
846xyu.info
quidotek.com

Targets

- Target
  jaffacakes118_Trojan-Spy.Win32.Noon.jhf.68428a57f2187e093c3a46ee4eba8e1b
- Size 828KB
- SHA256 62422bcc87eb927bf099b3421f048bd09e43507aabfa7e4fb6a269aa8719b47f
- MD5 68428a57f2187e093c3a46ee4eba8e1b
- SHA1 24ea4c6b9bb07a6f67feabb574842a3033465806
- SHA512 e3fe1a5be01b2034dc8682f0208c63d08e1269b5feebe913013744d19fbad0ec59d439db5aa2d0742c7fd9f0ef68c35046dd4e6126c5234b75778662586ed9bc
- SSDEEP 6144:Z6cRrX9ijOzZZcRZhl9KJICL3NZCvYKuXSiUMOtXPYKvZjf5d3X8vfbWa1G:Z6POzfcRZhzQRavY9XLQ1Nd
- TLSH
  T10D05DF16F03D8028E2A29774DC48E2B1496A7C6DECA788CB71E77F0F3571996D923B05
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

ra discovery formbook rat spyware stealer trojan
- Family: Formbook
  Formbook is a data stealing malware which is capable of stealing data.
  trojan spyware stealer formbook
- Formbook payload
  rat
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Family: Formbook

Formbook payload

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2