Overview

overview

10

Static

static

4960f97733...e9.exe

windows7-x64

10

4960f97733...e9.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    4960f9773333e5239226ca3a86e974e9.exe
  • Size 1.0MB
  • Sample221109-kep7eafbf8
  • SHA256 6d62d493cae6daf08828e14fc36c0dba18e7eb7f75ca390ec5d21ae0b3d2c9a3
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
formbookh9ncratspywarestealertrojan

Malware Config

Extracted

Family

  • formbook

Campaign

  • h9nc

Decoy

  • b6D0eLl/P/Ry1A==

  • KnXQBVoh1YK69G/dNR0pblRJIg==

  • WnXFkXyACqjtAumHng==

  • G0eU+2nD4Hul/C12

  • 7TSYGZRY3obqxfiSusm2GLKO7zs=

  • rKv1H4dXCeB4dIWkDod0

  • kJHsAWgJMtQx2XbWOE50pGw=

  • 9glV052OFiKdAumHng==

  • xiWAGAArojjC4Qlwk7dsq4N+0GTOyTQ=

  • 1dUgKYkXDs1c54VvhAC4IL0a4DY=

  • //E2NG867Y/MH8x206eKnQ==

  • BQd1aNJsP/Ry1A==

  • kOMaJH4YPB4903g=

  • zOhJx2nSgFXV

  • 3OUrp42pL88bb/+B06eKnQ==

  • bM5EoP21XTZ7psNQgQ==

  • BWG/kYrHtD9dmyigBbFamA==

  • BRlnZVmlrU14Zo/6Nmr9dVxHIg==

  • 4fdR0rjKc0t78Ww/Z0DQAMWm9Ts=

  • Lh9p82obtozdHSNv

Targets

    • Target
      4960f9773333e5239226ca3a86e974e9.exe
    • Size 1.0MB
    • SHA256 6d62d493cae6daf08828e14fc36c0dba18e7eb7f75ca390ec5d21ae0b3d2c9a3
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    formbookh9ncratspywarestealertrojan

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks