Overview

overview

10

Static

static

2c412d963b...44.exe

windows7-x64

10

2c412d963b...44.exe

windows10-2004-x64

10

Resubmissions

05-12-2022 00:54

221205-a9jyrsfc4z 10

02-12-2022 04:20

221202-ex772sgb9v 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2c412d963b9d1020bea10e91d8aa14a58b950e3b85c1dbc13be4301c468bd644

  • Size

    996KB

  • Sample

    221205-a9jyrsfc4z

  • MD5

    a4b95505ac0ea4f9e62da770bf60a2f8

  • SHA1

    e30412924fc260ce5842730d8f7808c5eb58471f

  • SHA256

    2c412d963b9d1020bea10e91d8aa14a58b950e3b85c1dbc13be4301c468bd644

  • SHA512

    56fc357e3529aa97f79f534daf843607dad29171a7d8318eabee5889329249b45dcb98d787f61712e220cada3e1f8872bb4b1ec25bc094796032551c0329e90f

  • SSDEEP

    12288:I6wgh/cS0Rt2UnIUCsJ1hmuaB73bdgjcedXtcSEjz5ktYnxWzgRVDqlq9cVrbF:INgh/f2t/nVp1A73Bgjc8tcf5ktYn04

Score
10/10
formbookb5jrratspywarestealertrojan

Malware Config

Extracted

Family

formbook

Campaign

b5jr

Decoy

0de6wt9fDj2VzxFqyWStU2IZ

CEIlhC3/D4QckHwMOdQ=

324+OHk+LFMruPQ9L80=

052Bh/ajSEHVHMVOuQkQ

9DfC8AWAPlfh8P8=

+4Zqgb98ctfC/sT1EK31+8i9zyQ=

fkISYqdAD/gETU1glGl6ow==

muKtqNNZLlfh8P8=

qXtWc7RyEEJcdPkP

uL6XqPW6YUKi4UGNsQ==

iQT57xCknBF0qdAtV/Q88sRX8LzWzoSk

ZzYKFzTOjad8wuY=

D8Va1XR/BkMvcAxaQpofB6Og+yaT

IP7S065oQrQ/yA==

aEIWMUXk4hdw+ClvnoUBL8i9zyQ=

bjoiiSUS4sjYJPQ9L80=

+8Sk90TLmX4nbfdOuQkQ

ukEMGzCnXT/FIMz2n7T8lHIT

JzDsQuW6h3T9UQgzlGl6ow==

ugPgPem5vCmtvzE9q9bIOMN7ow==

Targets

    • Target

      2c412d963b9d1020bea10e91d8aa14a58b950e3b85c1dbc13be4301c468bd644

    • Size

      996KB

    • MD5

      a4b95505ac0ea4f9e62da770bf60a2f8

    • SHA1

      e30412924fc260ce5842730d8f7808c5eb58471f

    • SHA256

      2c412d963b9d1020bea10e91d8aa14a58b950e3b85c1dbc13be4301c468bd644

    • SHA512

      56fc357e3529aa97f79f534daf843607dad29171a7d8318eabee5889329249b45dcb98d787f61712e220cada3e1f8872bb4b1ec25bc094796032551c0329e90f

    • SSDEEP

      12288:I6wgh/cS0Rt2UnIUCsJ1hmuaB73bdgjcedXtcSEjz5ktYnxWzgRVDqlq9cVrbF:INgh/f2t/nVp1A73Bgjc8tcf5ktYn04

    Score
    10/10
    formbookb5jrratspywarestealertrojan

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks