Overview

overview

10

Static

static

Requirement list.exe

windows7_x64

10

Requirement list.exe

windows10_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Requirement list.exe

  • Size

    648KB

  • Sample

    200708-3fy1ccafj2

  • MD5

    5dff100422e961e681af596f5307ba6d

  • SHA1

    68735aa701b4be6df63b0fed0edec4800027836b

  • SHA256

    def5dbf8e48af782ccb741ff6a1e1357af8dcafb701089b7f2d1c0919ae79f05

  • SHA512

    07aab159926347c24b6513c7f34a6fd52804f144ca1ff549aea14105a6bcaea715d8258a684be5fb852e9f33f87b96b991503b826bdef77b1dd2de29ac892c95

Score
10/10
formbookevasionpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      Requirement list.exe

    • Size

      648KB

    • MD5

      5dff100422e961e681af596f5307ba6d

    • SHA1

      68735aa701b4be6df63b0fed0edec4800027836b

    • SHA256

      def5dbf8e48af782ccb741ff6a1e1357af8dcafb701089b7f2d1c0919ae79f05

    • SHA512

      07aab159926347c24b6513c7f34a6fd52804f144ca1ff549aea14105a6bcaea715d8258a684be5fb852e9f33f87b96b991503b826bdef77b1dd2de29ac892c95

    Score
    10/10
    spywareevasiontrojanstealerformbookpersistence

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Adds Run entry to policy start application

      persistence

    • Deletes itself

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spyware

    • Checks whether UAC is enabled

      evasiontrojan

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks