General

  • Target
    รายละเอียดและคุณสมบัติ.exe
  • Size 309KB
  • Sample230108-cbjlfsce75
  • SHA256 0cb30d7e5f9476afb6ff37eeac4dcc524fe63105433d7388ca709ba6e9a0539e
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • formbook

Version
  • 4.1

Campaign
  • vr84

Decoy
  • intouchenergy.co.uk

  • lalumalkaliram.com

  • hillgreenholidays.co.uk

  • fluentliteracy.com

  • buildingworkerpower.com

  • by23577.com

  • gate-ch375019.online

  • jayess-decor.com

  • larkslife.com

  • swsnacks.co.uk

  • bigturtletiny.com

  • egggge.xyz

  • olastore.africa

  • lightshowsnewengland.com

  • daily-lox.com

  • empireoba.com

  • 91302events.com

  • lawrencecountyfirechiefs.com

  • abrahamslibrary.com

  • cleaner365.online

Targets

    • Target
      รายละเอียดและคุณสมบัติ.exe
    • Size 309KB
    • SHA256 0cb30d7e5f9476afb6ff37eeac4dcc524fe63105433d7388ca709ba6e9a0539e
    • MD5 SHA1 SHA512 SSDEEP
    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

    • Formbook payload

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks