FormBook | f28fc7b2cb76

Classifications

Spyware Injector

Threat Names

FormBook

Dynamic Analysis Report

Created on 2022-08-05T11:47:50+00:00

f28fc7b2cb76f0a714ef1e43b37ec0f5aa6c497d25d7de4379e8e0b91913d1c0.exe

Windows Exe (x86-32)

Remarks (1/1)

Auto Reboot Triggered (0x02000004): The operating system was rebooted during the analysis because the sample installed a startup script, task or application for persistence.

General

3.57 KB total sent, 9.42 KB total received

3 ports: 443, 53, 445

2 contacted IP addresses

1 URLs extracted

0 files downloaded

0 malicious hosts detected

DNS

63 Bytes sent, 283 Bytes received

1 queries for 1 domains

1 name server contacted

0 queries returned errors

HTTP/S

2.64 KB sent, 13.99 KB received

1 URLs, 1 contacted servers

1 sessions detected

Function Logfile

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting \"security.fileuri.strict_origin_policy\".

Before

After

WHOIS Domain Information

Screenshot

Domain Name
WHOIS Response