Overview

overview

10

Static

static

SecuriteIn...79.exe

windows7-x64

10

SecuriteIn...79.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    SecuriteInfo.com.Trojan.Inject4.42183.20502.1679.exe
  • Size 911KB
  • Sample220909-b4nv7sdchl
  • SHA256 4eecf4c73d1d4ce4d43ecd6b4d1d3e9c5ea8a310b2cb45e9bf16847863febf4f
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
formbook45naratspywarestealertrojan

Malware Config

Extracted

Family

  • formbook

Campaign

  • 45na

Decoy

  • FqMUfcl42lafwMDzy1RIx/lZcVmqqA==

  • XqmLkd2L9mYkCCyGpTJsYiM=

  • +O697EP/YV9Vw0ZV9DJsYiM=

  • fjCqF2UGUqMrCyaJl+3fKdtVEg==

  • Z6yw9kXxV7tKrD9X+DsOfjbR3i9y

  • 0ZIGKm8dZMlSNkNA8zJsYiM=

  • VMbIFXQHee97bobVn70thjEV

  • txb5F20VUJg89V5eMHUtMA==

  • Zmbl2iPYFPo4qkqfqTJsYiM=

  • AId/ediSsVXl0A==

  • CmGnCWcNYCcxJ0SKpTJsYiM=

  • NQuCa9tswCqOq9D7zA==

  • z/fS/Uj7PSNCkyQtzNUthjEV

  • tGK72TbTQLdd0myZeL8thjEV

  • j9LHzCrNCmEcEyJnjr8thjEV

  • avT49hcl6ajmoDo9

  • hWz+funK1izrWew=

  • 9Zz/M4UkdF+Mt6SxWGKR

  • SH9yqgG/NahLtmNjK3xZkVlKqETBEyt6Mw==

  • CjIZfMNoyOb53MdXHxk=

Targets

    • Target
      SecuriteInfo.com.Trojan.Inject4.42183.20502.1679.exe
    • Size 911KB
    • SHA256 4eecf4c73d1d4ce4d43ecd6b4d1d3e9c5ea8a310b2cb45e9bf16847863febf4f
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    formbook45naratspywarestealertrojan

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks