Overview

overview

10

Static

static

SecuriteIn...29.exe

windows7-x64

10

SecuriteIn...29.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    SecuriteInfo.com.Variant.Lazy.264511.1509.10929.exe
  • Size 1.0MB
  • Sample221115-hfr2aabf8x
  • SHA256 d621c9967cd3036f9e888588e71820eec8f5649ebe8c441ae3ef3bae9e01b0ac
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
formbooks5zxratspywarestealertrojan

Malware Config

Extracted

Family

  • formbook

Campaign

  • s5zx

Decoy

  • wMAY83Xf8pYlwmcLm5HvBdaL

  • CEtcpyGISM/CVFQ5zam3

  • jQE/nMmnXlmcTVQ5zam3

  • kUtRVpN/YY33wLfac81TKg==

  • WxtrRs8s52o/GPsPog==

  • w8LUN0UWABcTD1Hv

  • pCU+Wnk+6/E08im2Xo5y7uea

  • 4o2dnKCJNOgbwud9JfMHrMJuAGI+fg==

  • AbPNtFXXpcoeyWB1WGC/AOiS

  • 5Kbo75EKwcLiArHSoc/SIg==

  • IaICXWtqc2xvU++OXEd+tRitdw==

  • x0M6GKkDC8SPQGd/S61UdfgVZLqVDFg=

  • Y6TEJKsC3IxVJN986uJugqNcN7NO5EU=

  • rltiOepgaw3Mk0Lbt1yoxuA=

  • z94mjMxyFcLUu1Q=

  • xH3F3Hz93BCSMuBtI65JGm+VN3xm

  • +GO142npuuptGPsPog==

  • WX/VsE7R0FTm3Ju2ema/AOiS

  • qam0OKkfCyE6ZKxZtQ==

  • 0ojGr0OMV9khz+4GoA==

Targets

    • Target
      SecuriteInfo.com.Variant.Lazy.264511.1509.10929.exe
    • Size 1.0MB
    • SHA256 d621c9967cd3036f9e888588e71820eec8f5649ebe8c441ae3ef3bae9e01b0ac
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    formbooks5zxratspywarestealertrojan

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks