Overview

overview

10

Static

static

SecuriteIn...66.exe

windows7-x64

10

SecuriteIn...66.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    SecuriteInfo.com.Win32.PWSX-gen.25245.27166.exe
  • Size 722KB
  • Sample221118-m3dvdsdb4v
  • SHA256 6b2d71b9e5b1ed1d75d7eb03141735491c906c4e4dc6846bc1ef6e032507b1a5
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
formbookqmparatspywarestealertrojan

Malware Config

Extracted

Family

  • formbook

Campaign

  • qmpa

Decoy

  • IEiN8oqOnNUEkfZd

  • LWyAr1P5PHPV

  • tMGP9gYCIc9DKQ==

  • fWi2stCh2E3DBWuEK612

  • B3LCCi2JvPxfNA==

  • NjLnNjX+DDWt/VuEK612

  • AvK5/JdMDLztPRg=

  • U+zn2FswDLztPRg=

  • 3bRIXGwsIc9DKQ==

  • EXmAoj3/7Cyl+VuEK612

  • 1gkKPklP1odxx7c/Zm+L6HeV4g==

  • 1cMaHDg0ypV0vbT2Ibh+/5Cj5xmAVxA=

  • MSyBdIV+6nFRloTQAwmFklQ=

  • qilszGJvhMUsHgaUx/MNSKuo6A==

  • WYKLwmYEij4q2Hy6sOc=

  • sjII/IyFmORBFPJ2dVjpG0Q=

  • mTjzaRwZ9OsEkfZd

  • iL27vFhbX5ECbBIJxvJKbPHFf9M=

  • 5A5Xr0D5PHPV

  • IpxsaTO4a1/I

Targets

    • Target
      SecuriteInfo.com.Win32.PWSX-gen.25245.27166.exe
    • Size 722KB
    • SHA256 6b2d71b9e5b1ed1d75d7eb03141735491c906c4e4dc6846bc1ef6e032507b1a5
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    formbookqmparatspywarestealertrojan

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks