General
-
Target
bb20e6ff9fe00cce30550ebdd04e2ba02a0ebdba7ea798de88fbb19dde218761.exe
-
Size
708KB
-
Sample
240612-bzz3nsxhke
-
MD5
d785d8b7842f535f6d73bc29ab91260c
-
SHA1
e9970d3224cae458f9a6229446d38e4f9fded3c2
-
SHA256
bb20e6ff9fe00cce30550ebdd04e2ba02a0ebdba7ea798de88fbb19dde218761
-
SHA512
b75f2ff138530ee0ad28096d890a8aeaaf4ef6df1d671b19cc6837b401ee529ade6b9ca26eb25065520e0c8dad8c7687247b611b2b36df426d67070d6205c276
-
SSDEEP
12288:YAI/D3HH3DI+KTXl+CWUpZWr3Mgp/ehAD4Lvfp/GzBay5n7aHD:hI/jH3DItTXQChpmcgp/ehADswlZaHD
Malware Config
Extracted
formbook
4.1
38gc
fgoz3kry51.asia
vanishingacthairremoval.com
onlinelearningsandbox.com
feluca-egypt.com
goforsourcing.com
hairmadeperfect.com
brockspaydayearners.com
vintagetoj.com
tjandthecampers.com
emkanelajiehes.com
bestundersinkwaterfilter.com
proatta777.com
satuslot.beauty
nicolesbodybutter.com
montecarlogallery.com
homeautomation.one
cx-n1.ink
spennys.casa
gaozgn.cfd
hakajimai.online
Targets
-
-
Target
bb20e6ff9fe00cce30550ebdd04e2ba02a0ebdba7ea798de88fbb19dde218761.exe
-
Size
708KB
-
MD5
d785d8b7842f535f6d73bc29ab91260c
-
SHA1
e9970d3224cae458f9a6229446d38e4f9fded3c2
-
SHA256
bb20e6ff9fe00cce30550ebdd04e2ba02a0ebdba7ea798de88fbb19dde218761
-
SHA512
b75f2ff138530ee0ad28096d890a8aeaaf4ef6df1d671b19cc6837b401ee529ade6b9ca26eb25065520e0c8dad8c7687247b611b2b36df426d67070d6205c276
-
SSDEEP
12288:YAI/D3HH3DI+KTXl+CWUpZWr3Mgp/ehAD4Lvfp/GzBay5n7aHD:hI/jH3DItTXQChpmcgp/ehADswlZaHD
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook payload
-
Suspicious use of SetThreadContext
-