General
-
Target
a17248c6c5c5ffbc978d43dfa4b6a167.exe
-
Size
552KB
-
Sample
221202-a89g2age88
-
MD5
a17248c6c5c5ffbc978d43dfa4b6a167
-
SHA1
c99417cb8615416a978cc0b4c9cb90d80928457a
-
SHA256
4f6677dc3954982a155ebc120a4600225403047689acecaaab00cbed11b7f6d7
-
SHA512
ecb72869466aa1c9dafd2a75aa3dbb4cbb190bf2b141a1b6f3b91f03f78740ba7abc1492f6ed31cedd85512d08c6ad4aeb09752049ce9362bb714c1df6dfa19b
-
SSDEEP
12288:Urcq/eKxqvEm8+uqePNAx4EUUu1ovVj9jq:E/eKovE6VePCx4qvh9j
Malware Config
Extracted
formbook
b5jr
0de6wt9fDj2VzxFqyWStU2IZ
CEIlhC3/D4QckHwMOdQ=
324+OHk+LFMruPQ9L80=
052Bh/ajSEHVHMVOuQkQ
9DfC8AWAPlfh8P8=
+4Zqgb98ctfC/sT1EK31+8i9zyQ=
fkISYqdAD/gETU1glGl6ow==
muKtqNNZLlfh8P8=
qXtWc7RyEEJcdPkP
uL6XqPW6YUKi4UGNsQ==
iQT57xCknBF0qdAtV/Q88sRX8LzWzoSk
ZzYKFzTOjad8wuY=
D8Va1XR/BkMvcAxaQpofB6Og+yaT
IP7S065oQrQ/yA==
aEIWMUXk4hdw+ClvnoUBL8i9zyQ=
bjoiiSUS4sjYJPQ9L80=
+8Sk90TLmX4nbfdOuQkQ
ukEMGzCnXT/FIMz2n7T8lHIT
JzDsQuW6h3T9UQgzlGl6ow==
ugPgPem5vCmtvzE9q9bIOMN7ow==
Targets
-
-
Target
a17248c6c5c5ffbc978d43dfa4b6a167.exe
-
Size
552KB
-
MD5
a17248c6c5c5ffbc978d43dfa4b6a167
-
SHA1
c99417cb8615416a978cc0b4c9cb90d80928457a
-
SHA256
4f6677dc3954982a155ebc120a4600225403047689acecaaab00cbed11b7f6d7
-
SHA512
ecb72869466aa1c9dafd2a75aa3dbb4cbb190bf2b141a1b6f3b91f03f78740ba7abc1492f6ed31cedd85512d08c6ad4aeb09752049ce9362bb714c1df6dfa19b
-
SSDEEP
12288:Urcq/eKxqvEm8+uqePNAx4EUUu1ovVj9jq:E/eKovE6VePCx4qvh9j
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Suspicious use of SetThreadContext
-