Overview

overview

10

Static

static

SecuriteIn...42.exe

windows7-x64

10

SecuriteIn...42.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    SecuriteInfo.com.Win32.PWSX-gen.6500.7242.exe
  • Size 941KB
  • Sample221031-tn221abde2
  • SHA256 0c7d7c9cf153c7c97e3e2789bc903e72ccb6b27251df20e56cf7015d5df372f5
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
formbooko0cbratspywarestealertrojan

Malware Config

Extracted

Family

  • formbook

Campaign

  • o0cb

Decoy

  • MnIkB8ic2qUgkrHK0g==

  • BEp5ADX1KNsRkrHK0g==

  • BnX7exkYq8Ml8Q==

  • VHFnxRbZhVfJv6Hkhcs=

  • 4/JqTPnIAL7/O+Rx7UEp

  • 9zlRsvrDhkmaVLxREgKFxxPuCLk=

  • e6JHOvPABuNIoXL81oC7mqJB0LEQ

  • FSYdbTkHJQVcS/J4d9Bn4Fw=

  • b795gqFxQiiidwTjtu8lDA==

  • O2TXxuejTxNv/tS4yw==

  • svCbYh3t1HJpto8mJMM=

  • VZII3ZrRWq3LUiSAR/NBGVgN8YSVcuc=

  • 2BL9Wns3oQE7A9vvz9Bn4Fw=

  • KEt/BnQCPhZ70nmqUQZlcg/96iEtgA==

  • f5IE5Ndz0DJO1m6QZiNUYZeIs2M1gw==

  • udR4Sve8Bet5Bt//tu8lDA==

  • P6J58YLGkaX97ZQ=

  • DxSrqm8745PiV/kO

  • fIAeDIF8MCrTaQP8nGC309ycww==

  • pN37QgCl28MQ47QG

Targets

    • Target
      SecuriteInfo.com.Win32.PWSX-gen.6500.7242.exe
    • Size 941KB
    • SHA256 0c7d7c9cf153c7c97e3e2789bc903e72ccb6b27251df20e56cf7015d5df372f5
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    formbooko0cbratspywarestealertrojan

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks