Overview

overview

10

Static

static

SecuriteIn...17.exe

windows7-x64

10

SecuriteIn...17.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    SecuriteInfo.com.Trojan.Packed2.44634.8320.3117.exe
  • Size 1005KB
  • Sample221122-kfahcafe53
  • SHA256 ca88199e2a973706096231f2d6cf5fcf9a3373e02a3c9aba0d63bfe2d29a9e6b
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
formbookeo28ratspywarestealertrojan

Malware Config

Extracted

Family

  • formbook

Campaign

  • eo28

Decoy

  • KhQSJxKIAe5OCgs13VI0zqA=

  • YjZBZJRKpfcAiQ==

  • DvYoQl4TrMPcZGPFu6tU2w==

  • Mo8sfVKOJ6g4YN422Er+Hu/B5TdyQ6k8

  • KyQ8SuziIzmFXXm/eKlHH+at

  • h3GIuu2UFei3P0CFKGbGzGcjUa0=

  • KKhFW8S/OrE6sTt3FY90rffNwOPWTQg=

  • 1Tv8HHm5f7xC2ZY=

  • /evMPG6o1LxC2ZY=

  • 8GIWRXTpQhj+k+JD62xGjpYv0w==

  • U7gUeKAdgXd1JOhS/TGV0w==

  • /Obl9BCB05+lb7gaAzoewg==

  • APQYW0W4KhxKsX+VUM8=

  • GX8ebAoIkhP70xOGOmURan6iyqGAFw==

  • Jg0XhiYvhQnX

  • O64vUfm+F/Pnto7tlg==

  • 4D69IPW1pmh5S53t

  • +973ECRxxLxC2ZY=

  • TR4fNCaiJAkMvQsuKl+6

  • 5+gSY5RO3raJ9/ZLAQfri2cjUa0=

Targets

    • Target
      SecuriteInfo.com.Trojan.Packed2.44634.8320.3117.exe
    • Size 1005KB
    • SHA256 ca88199e2a973706096231f2d6cf5fcf9a3373e02a3c9aba0d63bfe2d29a9e6b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    formbookeo28ratspywarestealertrojan

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks