Overview

overview

10

Static

static

SecuriteIn...76.exe

windows7-x64

10

SecuriteIn...76.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    SecuriteInfo.com.Win32.PWSX-gen.11450.5476.exe
  • Size 820KB
  • Sample221107-gr1xwsdhej
  • SHA256 1a269ea6349fc76e0d8a35b318eef5a3eca9498a419cf405d4cbf8dbd6c49ed7
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
formbookqmparatspywarestealertrojan

Malware Config

Extracted

Family

  • formbook

Campaign

  • qmpa

Decoy

  • IEiN8oqOnNUEkfZd

  • LWyAr1P5PHPV

  • tMGP9gYCIc9DKQ==

  • fWi2stCh2E3DBWuEK612

  • B3LCCi2JvPxfNA==

  • NjLnNjX+DDWt/VuEK612

  • AvK5/JdMDLztPRg=

  • U+zn2FswDLztPRg=

  • 3bRIXGwsIc9DKQ==

  • EXmAoj3/7Cyl+VuEK612

  • 1gkKPklP1odxx7c/Zm+L6HeV4g==

  • 1cMaHDg0ypV0vbT2Ibh+/5Cj5xmAVxA=

  • MSyBdIV+6nFRloTQAwmFklQ=

  • qilszGJvhMUsHgaUx/MNSKuo6A==

  • WYKLwmYEij4q2Hy6sOc=

  • sjII/IyFmORBFPJ2dVjpG0Q=

  • mTjzaRwZ9OsEkfZd

  • iL27vFhbX5ECbBIJxvJKbPHFf9M=

  • 5A5Xr0D5PHPV

  • IpxsaTO4a1/I

Targets

    • Target
      SecuriteInfo.com.Win32.PWSX-gen.11450.5476.exe
    • Size 820KB
    • SHA256 1a269ea6349fc76e0d8a35b318eef5a3eca9498a419cf405d4cbf8dbd6c49ed7
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    formbookqmparatspywarestealertrojan

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks