Overview

overview

10

Static

static

4429cdfd2c...dc.exe

windows7-x64

10

4429cdfd2c...dc.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    4429cdfd2c41797b77ec6b466a96ecbbf6aa4662e615be16add1597e938398dc.exe
  • Size 773KB
  • Sample221007-pv75dacffq
  • SHA256 4429cdfd2c41797b77ec6b466a96ecbbf6aa4662e615be16add1597e938398dc
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
formbooketfhratspywarestealertrojan

Malware Config

Extracted

Family

  • formbook

Campaign

  • etfh

Decoy

  • 7GZ6EDICLTxRlA==

  • PLtlQESN4qcH

  • Hl1Kaj5k/IbeqjD2BbfAIAg=

  • IGIFzYb9FfCCzV9l

  • i6XHgFSN4qcH

  • OJwysQEOtacTgw==

  • sA02ZDlg/cQuq8OHbjJrZj5hZfBW2hA=

  • 4RW/U8ADLezCD/fcwg==

  • 3B8SJMhHZuG8DjTuj7wqNA==

  • YYEwzTC4Qw4gaIUlH4jx

  • Ues8V/VDLTxRlA==

  • xA958bGoMrQ=

  • YKOQqIa0Qwqq9IR2

  • VoV5nnq7XeY/BZmK2BtWmyiCrQ==

  • O/cKZyK2Wdw386OK9NobskQM

  • k50X1qTOYjVFGrU=

  • +T65goQJnSnD0sqxeMT78ktXVOho4BQ=

  • uJapUOj3EKOK0BjGpf4ePA==

  • QNs2VScpggMYnsh0

  • Z7XOfidNLTxRlA==

Targets

    • Target
      4429cdfd2c41797b77ec6b466a96ecbbf6aa4662e615be16add1597e938398dc.exe
    • Size 773KB
    • SHA256 4429cdfd2c41797b77ec6b466a96ecbbf6aa4662e615be16add1597e938398dc
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    formbooketfhratspywarestealertrojan

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks