General
-
Target
SecuriteInfo.com.Trojan.PackedNET.1701.27630.3248.exe
-
Size
940KB
-
Sample
221201-nnwx4adb87
-
MD5
ad4afa925700586e0138bda59adaddb7
-
SHA1
8309a84b841861ccac278fc03a5e213bd6628126
-
SHA256
69c4f08c64ca2809ab57dfb43008d4e197bda7ce1a3613402563660afd6e6226
-
SHA512
48ccbd2a3297246499a252f9a3028f6400ca5199a0158f893ab62a347fc887269d338ef761e8daabe723c24bbb985b242b9091ac054fe541181598b33d5bd5e0
-
SSDEEP
24576:vzq75DWfksa2TEiYxBayY7CdTiwAAgEEY4:8Wfe2Q9xBxDTQp
Malware Config
Extracted
formbook
fqwu
N6XHavFRXQTRmNUkF9dn
EoaWTgFMmLFmUJ7CJNkTiGoj5A==
Dm+WNJDwSQa5cML3Q7EBiGoj5A==
nixR8ZCkOWjqrASBuic=
yvWQNApkdf4QYIih4+xUDY0=
RtmBQtDYDb50g8btXA==
8SU541y9Ec12NYK8PSOfA8OPpaphimY=
/yEvxvlAkquuY3W1QQ==
AlHZgYW4BiI9V+M=
YsHIUsAOO15j+9TnWA==
JJu1S7QIIMij0xUqlUtv
CmWBLrD98YnyUCCFvy0=
uPwhAVEvtu1rTuY=
PI6bR88GVGXmRlpxpKjtBpo=
GnL7qs9HVQAiF6ckF9dn
2zVeBFKZgO1rTuY=
2VI1VpOg7boCAFxvrWN3ys9rovE=
L1lO62zA2o1QEEZRQtgh7g==
brhF5dY1e3zmSyCFvy0=
U6m2TsEidTTdsA5kX8wh7g==
Targets
-
-
Target
SecuriteInfo.com.Trojan.PackedNET.1701.27630.3248.exe
-
Size
940KB
-
MD5
ad4afa925700586e0138bda59adaddb7
-
SHA1
8309a84b841861ccac278fc03a5e213bd6628126
-
SHA256
69c4f08c64ca2809ab57dfb43008d4e197bda7ce1a3613402563660afd6e6226
-
SHA512
48ccbd2a3297246499a252f9a3028f6400ca5199a0158f893ab62a347fc887269d338ef761e8daabe723c24bbb985b242b9091ac054fe541181598b33d5bd5e0
-
SSDEEP
24576:vzq75DWfksa2TEiYxBayY7CdTiwAAgEEY4:8Wfe2Q9xBxDTQp
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Suspicious use of SetThreadContext
-