Overview

overview

10

Static

static

SecuriteIn...41.exe

windows7-x64

10

SecuriteIn...41.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    SecuriteInfo.com.Trojan.PackedNET.738.1739.2441.exe
  • Size 824KB
  • Sample221024-st6rpshdg9
  • SHA256 8ba89f4cd9f76d5ec870673db35849d80c7bb2a46614bb4e7a8fd2e951846c11
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
formbookgpazratspywarestealertrojan

Malware Config

Extracted

Family

  • formbook

Campaign

  • gpaz

Decoy

  • 5j3uoV7+6eJ9XICnu+mP6OUkhXc=

  • oYDcQQrsUCY+Kygqdacr

  • a0plKcxTec+WBAYZP6Yo

  • 0TSBRR86rkA6q7Tq/VQLfg==

  • ML+HexMkoB2+jcA/ed9gtMEMJMaZMHs=

  • ZkstGAieglG4tzT0JIdN0eUkhXc=

  • GiL8CLTFJv8EwFbgJEPI6Oahuw==

  • sJkVuU3uKo4JxRmx30EvuY30JLFHbw==

  • MAZh/YkqdeBpCQANIxYVpCBj

  • 5b6GgVmCu58kI4gwR4F21ijAsw==

  • SV7TgR/EorR/NvK/Aw==

  • 4f7MkWJvwybPlGDzCw==

  • QZPtvpGjAFcSibT5

  • IqpgIfXZCewdAo3XGXU=

  • a9agVOjJIiwPDeY=

  • NiIIJPHyHw+qlOh+5MjVpOUkhXc=

  • HjQsFaB5xnGiUuKyAw==

  • 7L6gqnxUOxQx00sMO5BKz+UkhXc=

  • ULYVxFYSNPaPfA==

  • XFgBvWowRNtdZQ==

Targets

    • Target
      SecuriteInfo.com.Trojan.PackedNET.738.1739.2441.exe
    • Size 824KB
    • SHA256 8ba89f4cd9f76d5ec870673db35849d80c7bb2a46614bb4e7a8fd2e951846c11
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    formbookgpazratspywarestealertrojan

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks