General
-
Target
SecuriteInfo.com.Trojan.PackedNET.1701.5400.1001.exe
-
Size
1.0MB
-
Sample
221201-kdlgtsed5t
-
MD5
d8896273f6e3976c0051d2985fca39d3
-
SHA1
ffa987faeda3e9d6a912b63dbd8fb7adf105fa8f
-
SHA256
773e21380e7b28202c6c142d4562bcfd733de46ffa3e63a1351dd2860c065a94
-
SHA512
8f90bf50ec129b11e06dc7f48f13399a4b59d67f2daf6043a5fcd5d6b9f6dd584a9bc86a7586056720c79ed834b5b2f31ae2c52018c2d4678f02de5a4fc00d38
-
SSDEEP
24576:TrqkTiwAAgEEY4BjH04VwMQJXP7XLBRFPG1e/1:HTQpfVwMMP7XL7Fu1eN
Malware Config
Extracted
formbook
fh8p
51F23EN4Txw0zl7VSV72h3U1
r51e7umgAYu/WtxeMGHnGxLw2sBpOeZJ
IQ38brXAkQLFMYHztA==
ZsVI1+ZC1m5iov4xpA==
3sltsjJTHbqCqj4yzxAxSg==
cd/wV6bAp00lenVgURspAmkDrXpY
FPiMqs88TyH2LcbQ
B+tfkhM6CKKnkwHY
3UG4Fv6Z1YbVcKhGADQ=
7HWXwp4acUvZid/eOwbUBPCsF+4=
cFmdzrE0gUTDYnlFzxAxSg==
NZ68/khRFLankwHY
iwOpJcLSmHX2LcbQ
Riu+/F9kYTgDK5SAc0Rmsmcs
F2wn+jKjVAwF
Z77ISAWVozHM7Xs/XIK5
V71c6sFWuV6uagGJWMUBxCs=
JvYlUje3B95h+Ts+jv61WcvMdO4AdzSVjQ==
fOMJf5pQ2nKHJn3XzxAxSg==
5k9hflzYDY/GQnjazxAxSg==
Targets
-
-
Target
SecuriteInfo.com.Trojan.PackedNET.1701.5400.1001.exe
-
Size
1.0MB
-
MD5
d8896273f6e3976c0051d2985fca39d3
-
SHA1
ffa987faeda3e9d6a912b63dbd8fb7adf105fa8f
-
SHA256
773e21380e7b28202c6c142d4562bcfd733de46ffa3e63a1351dd2860c065a94
-
SHA512
8f90bf50ec129b11e06dc7f48f13399a4b59d67f2daf6043a5fcd5d6b9f6dd584a9bc86a7586056720c79ed834b5b2f31ae2c52018c2d4678f02de5a4fc00d38
-
SSDEEP
24576:TrqkTiwAAgEEY4BjH04VwMQJXP7XLBRFPG1e/1:HTQpfVwMMP7XL7Fu1eN
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Suspicious use of SetThreadContext
-