Overview

overview

10

Static

static

SwiftGGD.S...f..exe

windows7_x64

10

SwiftGGD.S...f..exe

windows10-2004_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0223d69740fda60c30e8f7394b1d13ff666011d3afa7b11b933f82d723eb2fb3

  • Size

    255KB

  • Sample

    220521-d5nb6sghc2

  • MD5

    c5337e0193e1a7f6d329791f3a70e12c

  • SHA1

    66006fc51e58e37d472b535a587454a1be8472f8

  • SHA256

    0223d69740fda60c30e8f7394b1d13ff666011d3afa7b11b933f82d723eb2fb3

  • SHA512

    eb283696c319c8f599d62379e16314d4f206fedbafbe95f2c732005653601d4422d84c997b91099d1258799b14f7126a9bdd764ee42c841ba73ed7ed6340b97d

Score
10/10
formbookfgfratspywarestealertrojan

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

fgf

Decoy

cat5irma.com

leadershiplakewood.info

flm1tr.biz

silverstarps.com

tzsbhy.net

disseny-web-lleida.net

cancellationofcontract.com

potentialanalysen.com

realinja.net

cateraggio.com

17017brookwooddrive.com

liberty-hope.net

northmnsword.com

500lombardy.com

roykossena.com

bowelral.com

hidiinvestmentgroup.com

urbarecords.net

404chianti.com

zimomor.com

Targets

    • Target

      SwiftGGD.Scan.pdf..exe

    • Size

      359KB

    • MD5

      00019153347279c9e4a2849c597969b2

    • SHA1

      bdf7376b3454edf51cc79b6c96377f02860fc2ad

    • SHA256

      9ce61ae5037ceb9f8ce9dac6288d9125230dc58f58a4e1450e85081a8a620c15

    • SHA512

      ac66013e7ae9f32e5583ffde60536e0800d9e4b0f472b04ea5fcbde87e90cc84633fe850e44ad65aef3a45a3567e1f7fe44069ff4f7aef93ac574c964c748dcd

    Score
    10/10
    formbookfgfratspywarestealertrojan

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Formbook Payload

      rat

    • Deletes itself

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Command-Line Interface

1
T1059

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks