Overview

overview

10

Static

static

SecuriteIn...03.exe

windows7-x64

10

SecuriteIn...03.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    SecuriteInfo.com.Trojan.MSIL.AgentTesla.NWJ.MTB.22257.28503.exe
  • Size 1.0MB
  • Sample221108-s62zaaedc9
  • SHA256 e5afa7413d271eb60f89be735d02aee02bb7390c022eeadf46ff30448416995d
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
formbooke7nbratspywarestealertrojan

Malware Config

Extracted

Family

  • formbook

Campaign

  • e7nb

Decoy

  • PsTzh30CVEdk

  • lubNs/ediiAunBs=

  • 508fP8IdRzd/

  • U549ZBc72VO65OOIBgw=

  • Zrhzpl05MNXVsnltXG7VJcZMaQ==

  • PHkdSJEyEOSxOwb6W0mv9ciuW+ybmQMt

  • uirizUluo2S80tubABs=

  • NSBqCst2TQsoCuPQCWrVJcZMaQ==

  • XgULikLb6PkeOubi

  • 5YBDKpVGIrvCFbOc3Q==

  • 8DbiHNWtmTAyw1YsjH/lL8TpimUu8ygl

  • nxj1I6Op1IGJVRbN7gpx

  • 0KvxaFuA6cBryzDH1Lni7s9W

  • 1rS3Dk9oxD/fRA==

  • eMFF9fHMPRZFILKx5WCRng==

  • pMxC7OGKd0jbCYRVMHnbFur1N+DU

  • nZzNQDhdyK5hEL2QkPhrtYVHz7k62Y0=

  • siXP5iXuAcxnhZBayg==

  • dP6jOfGxmFQDW+zPoDtnpnY=

  • MidVv6GxFvuwx5R5/w4=

Targets

    • Target
      SecuriteInfo.com.Trojan.MSIL.AgentTesla.NWJ.MTB.22257.28503.exe
    • Size 1.0MB
    • SHA256 e5afa7413d271eb60f89be735d02aee02bb7390c022eeadf46ff30448416995d
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    formbooke7nbratspywarestealertrojan

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks