Overview

overview

10

Static

static

SecuriteIn...69.exe

windows7-x64

10

SecuriteIn...69.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    SecuriteInfo.com.Win32.PWSX-gen.3769.exe
  • Size 822KB
  • Sample220922-vkqegacaa4
  • SHA256 757f1d0b58f293625cab63b5f8f3d6e4e5c2fdd7a49ad94c4fc8a506f468a395
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
formbookwiasratspywarestealertrojan

Malware Config

Extracted

Family

  • formbook

Campaign

  • wias

Decoy

  • CXXKHv6a96VrB0/Zxg==

  • o+4epQpE128PzREWa6HKPKQ=

  • xySzkeSGOEQUtj9p

  • SY0ZnYU2oysFVrQN8/w=

  • G3VNNJLAtq5ROxON8orShVpKnb6gcQ==

  • VcHOx94NdAOC

  • b7+BgeXj7OOpfA==

  • sA2ZVDTD9GUO7pp4X3Tp

  • GZXYlfcEHD0Utj9p

  • sgEKFfCDY4IV8dyPhJNIfZrJ5Q==

  • OYf4xx1ERFHTmW8M26HKPKQ=

  • JXYzDOR+TD0Utj9p

  • S5EZ7UxxaIU6MjvWYrpo0A==

  • IUWFBUb1P913X2nz19RXfZrJ5Q==

  • +W+5InJfIZdo+E8=

  • PIOR/2Qpdxatj5tAKVtSwm1b7RY=

  • e+W/onksJ0VPBvWHaqJUfZrJ5Q==

  • NZWlBmoxehX4pQHr2g==

  • DGN0gWspwMxraw==

  • Rah6SBTS2dBjHW9w0UNCKRx+0Qzt

Targets

    • Target
      SecuriteInfo.com.Win32.PWSX-gen.3769.exe
    • Size 822KB
    • SHA256 757f1d0b58f293625cab63b5f8f3d6e4e5c2fdd7a49ad94c4fc8a506f468a395
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    formbookwiasratspywarestealertrojan

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks