Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

tmp.exe

windows7-x64

1

tmp.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    tmp

  • Size

    812KB

  • Sample

    220919-pmykzacegq

  • MD5

    909d921710d0a5bc4ddfacb0ced137bf

  • SHA1

    fdea869c122579b91b37eb9c30208645191375b1

  • SHA256

    f2a0159fafd3bdbe6b457f8f724e142c8cfd9cb0eb02b508729cc7e3c42cf593

  • SHA512

    afc37126846a38d7118fbcc44358f4b9d45a3ce5ad4fa4b1ef7ae65660b05cf0a3ca7f39a2da09eca5ac55eccdf09ea016ed076ee66ead0232b49ce0a94b68c2

  • SSDEEP

    12288:9RWl0W42kA3TOGU2ybvNTjhFG8KBvqKT8B8IHhp2TBS:iw2kQ6GTaFGDBvBCLBpAS

Score
10/10
formbooksde7ratspywarestealertrojan

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

sde7

Decoy

lolfilmfestival.com

pousdaobosque.com

tangierfilm.com

valuedassist.com

qcrluxuryrentals.com

poc4cloudx.com

irizh.art

flowsever.com

serios-lifestyle.com

abc-diomain.com

bmwoemwarehouse.com

vivelamoda.com

thesycorax.online

goodjob129.com

hudyeanamaze.com

pabcp.com

millennialworkouts.com

gpcr-compound-library.com

rotyupin.xyz

hnkcsm.com

Targets

    • Target

      tmp

    • Size

      812KB

    • MD5

      909d921710d0a5bc4ddfacb0ced137bf

    • SHA1

      fdea869c122579b91b37eb9c30208645191375b1

    • SHA256

      f2a0159fafd3bdbe6b457f8f724e142c8cfd9cb0eb02b508729cc7e3c42cf593

    • SHA512

      afc37126846a38d7118fbcc44358f4b9d45a3ce5ad4fa4b1ef7ae65660b05cf0a3ca7f39a2da09eca5ac55eccdf09ea016ed076ee66ead0232b49ce0a94b68c2

    • SSDEEP

      12288:9RWl0W42kA3TOGU2ybvNTjhFG8KBvqKT8B8IHhp2TBS:iw2kQ6GTaFGDBvBCLBpAS

    Score
    10/10
    formbooksde7ratspywarestealertrojan

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Formbook payload

      rat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks