Overview

overview

10

Static

static

SecuriteIn...18.exe

windows7-x64

10

SecuriteIn...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    SecuriteInfo.com.Win32.TrojanX-gen.23648.17418.exe
  • Size 671KB
  • Sample221117-e78xbshf61
  • SHA256 78c83e6e7ce1c4708302ea7cd0a51b142b49f1e58e5fdefa07d9891b019683a4
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
formbookg25eratspywarestealertrojan

Malware Config

Extracted

Family

  • formbook

Version

  • 4.1

Campaign

  • g25e

Decoy

  • 2491254125.xyz

  • hookd.gay

  • uxmelange.com

  • startupvision3.com

  • evanwoosley-reed.com

  • uspalupdser.info

  • lx0599.com

  • grupoiaez.com

  • londonpapershop.com

  • cremas.store

  • risespec.com

  • olivierverdoyant.com

  • creatednow.com

  • epicureanhometreats.com

  • iqijp.com

  • vcraftboutique.com

  • furnaristudios.com

  • dealsgolf.com

  • djwoojs.com

  • boatslave.com

Targets

    • Target
      SecuriteInfo.com.Win32.TrojanX-gen.23648.17418.exe
    • Size 671KB
    • SHA256 78c83e6e7ce1c4708302ea7cd0a51b142b49f1e58e5fdefa07d9891b019683a4
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    formbookg25eratspywarestealertrojan

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Formbook payload

      rat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks