Overview

overview

10

Static

static

DOC2022091...89.exe

windows7-x64

10

DOC2022091...89.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    DOC20220914-5678909876556089.exe
  • Size 936KB
  • Sample220925-vy912afee9
  • SHA256 d2f322cb15f591ef314eda3cb164f8ab0ca0048f89c8694cf9bc6ca39a2785fb
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
formbookc1noratspywarestealertrojan

Malware Config

Extracted

Family

  • formbook

Campaign

  • c1no

Decoy

  • NOAZ1GtFnUx1bqjUWmD6

  • sUBk3CYAoWuQfq3UWmD6

  • 5vwrVl0msDtpEkYt

  • VtL6sSoIchhMStcj5DxYbm3FBw==

  • BKjy1ZxyhhuJ2guPWUI=

  • eAgklPLAE7zgqOmwRqPNOQLXz1Y=

  • aApC9n9Zp0ZhObwjLLLUAg1cjsx6Lg==

  • OrLZYLeFBavC1cD5+A==

  • jJm87eu4hy/QMbYE/wzDRQLXz1Y=

  • s63OS5RsBKrY3FurpDZXbm3FBw==

  • hyxwKsePxJNCwwejbEg=

  • l5667e2vQOkM4hFPE5yA0Q==

  • wTtVQBT04YkyoNKoN53GFV9m2hpS

  • +pzWhBnS26FJqiRyZXQrqR1Ow/1B

  • d/VHx031x5W2

  • GjhhiKSDZ/1txQejbEg=

  • nDhRjp5e9JeQiKzm+gqI41hdV5nFhsI=

  • ws4wtUMZYA1pEkYt

  • GazXV6Fr6akfcvxEOcbpTTCmMEq7Jg==

  • 2vAOHufF5MT6VdU=

Targets

    • Target
      DOC20220914-5678909876556089.exe
    • Size 936KB
    • SHA256 d2f322cb15f591ef314eda3cb164f8ab0ca0048f89c8694cf9bc6ca39a2785fb
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    formbookc1noratspywarestealertrojan

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks