Overview

overview

10

Static

static

cc62a78ce6...74.exe

windows7-x64

10

cc62a78ce6...74.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    cc62a78ce6a2d386c813001e1cd65774.exe
  • Size 1015KB
  • Sample221108-trcxaahbhm
  • SHA256 ee5d38dba17ae62136092b7288149dd6fc472a829eb35daee3047ec5d32111b5
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
formbookdcn0ratspywarestealertrojan

Malware Config

Extracted

Family

  • formbook

Campaign

  • dcn0

Decoy

  • ZVx68vDtAMBCwg==

  • oBMBvsNORkM/O/ox

  • Ff9pISWkm6eG4lByIspp

  • c2T42c6CIIF6B8xTxm9XzpVw

  • bvjhxRbnAC183w==

  • 0lTttSNG4HUDNflyIspp

  • hPXFlstqiHA/O/ox

  • WLR+MeerxZ0cNn1ja+IQAYo=

  • IHRn4xXOVKi477zarG+ObSy7YJA=

  • Xhf3e+tdAC183w==

  • Xk0ZAezv2rWH

  • kngo+vBeSRN7AszNwam3Osmguuqc0MoC

  • a2Qp7a+E8fSw7LDjpnqEKjsRZA==

  • 3zjy4E7+QM48wg==

  • YcCmqT3OUNAigVott2pBKiy7YJA=

  • 4+SMeX1juat/5cZ1AZihcyy7YJA=

  • /+m7sro0OBTl3TMpCw==

  • i2ctEfe4//a64yklMsgS2J90

  • +loZ2QKGX0UWgpvErMs=

  • b9BNCnJWQJS8IfsR0uR3bCy7YJA=

Targets

    • Target
      cc62a78ce6a2d386c813001e1cd65774.exe
    • Size 1015KB
    • SHA256 ee5d38dba17ae62136092b7288149dd6fc472a829eb35daee3047ec5d32111b5
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    formbookdcn0ratspywarestealertrojan

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks