General
-
Target
SecuriteInfo.com.Trojan.PackedNET.1701.28303.5115.exe
-
Size
956KB
-
Sample
221201-nnwx4adb88
-
MD5
25afac4af95e135929e5dde1963f8f8f
-
SHA1
e201340360ea54e7f95076ff6cd35c9d7750b2ca
-
SHA256
459ce6294883e7069e69f00661550399519e9710fa272e68b92fc23505269751
-
SHA512
2e4341f33f8215ff136c5320ce2f23b555e76d370931e8883f1390ff1bb56d7cee5e5eb64865528649c9ea7962eccb48208ee681dfac9b263bd43c529dbe40b9
-
SSDEEP
24576:52qmbU8dpkJLgWv+Mi5oenEpaTiwAAgEEY4:QbU8dpk5K5oenjTQp
Malware Config
Extracted
formbook
go5o
fEf3DteodjMS6sd7vgJeSvrFAjOyshM=
uc2s6+zSjq1jaMBrDIkbbfRB4Q==
1DUmPeheM/m2JuYZT9n1JEI=
Q8FlspVcKwohXhVD
PFATZwiJD6bkPqs=
5tHEw4jXm14dvppgGJx131tYeM4=
a5FigDzuo78hXhVD
nfmv8+wh5JHV
lnMvJvjhm7t0fdaA+9JrhA==
GnFAOuQx+o/L
kKeWmF41+RKfwkyZrXtbZUo=
koFndRQCh1zzOfO3TZLsdBxb
mXUzN51s8JHV
j+vOPsXEyCOEzA==
KgrZxnGEVOh8zQ==
LvWq2+PSUvusUEdnfkZXommlxCwf
meqtGP3Afq9MXXMv5A==
2W80eXRnD/Hp+jQCrmU=
asKlvYDQpWW/Cs6A+9JrhA==
fm9gkFsDy9w=
Targets
-
-
Target
SecuriteInfo.com.Trojan.PackedNET.1701.28303.5115.exe
-
Size
956KB
-
MD5
25afac4af95e135929e5dde1963f8f8f
-
SHA1
e201340360ea54e7f95076ff6cd35c9d7750b2ca
-
SHA256
459ce6294883e7069e69f00661550399519e9710fa272e68b92fc23505269751
-
SHA512
2e4341f33f8215ff136c5320ce2f23b555e76d370931e8883f1390ff1bb56d7cee5e5eb64865528649c9ea7962eccb48208ee681dfac9b263bd43c529dbe40b9
-
SSDEEP
24576:52qmbU8dpkJLgWv+Mi5oenEpaTiwAAgEEY4:QbU8dpk5K5oenjTQp
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Suspicious use of SetThreadContext
-