General
-
Target
ba9b013506b8a73739901db161488cb054b2e4c56bd81330ed21958e3a5d5c56
-
Size
745KB
-
Sample
221206-kf2xlaaf24
-
MD5
7f048f0a041c3cd706eed4e8790b55ef
-
SHA1
7c6beddbd23a6008772bf79d52f71c002272b201
-
SHA256
ba9b013506b8a73739901db161488cb054b2e4c56bd81330ed21958e3a5d5c56
-
SHA512
bd4d75e240c1568456135088355357842746a78fe1e6ada05b65f877fa9401ebca5a0122a2b1e414df029f7953c20d2b4d01e64403635a6dd2a0088b2ba017d0
-
SSDEEP
12288:7wlfSmomPZef0stYJ07fpKE618Sa7bZtPGGCnFXTJa4XPtqvyuP/N:qomxiyexNe8F7bvYvQFXN
Malware Config
Extracted
formbook
w086
F6jSz+l9QmYXguG/xUipf/6ixrik
cQZre8twfBVOOJgLenGTGA==
pG5kW2/wqwEOCVxZ
KORXeYwt7wF8J3BR
HL0ZdBMjeHet
TR57b4Yi6wJ8J3BR
fRyK2yaqeDRGHiQTTw==
RwhsqfRxABNZS59wenGTGA==
GuZaY4H4ahcWKjUdVg==
I5C4/Wyz3fglj+o=
Te5QPEu3NjZ0P58LenGTGA==
M9YJLwifZIi9pfnj2Nj/kA6+ZlU=
c/JFdRndG8f/HiQTTw==
nMmcD1UjeHet
QWR7+9Rh8/l8J3BR
9MD+BzOyI6mXtM4w6LMyEA==
WABgaYPqdJzl2TviGbdH
02OexRebqj3+U2kXhQ0=
j17M2R3/fQwFHiQTTw==
dQpReYss5/l8J3BR
Targets
-
-
Target
ba9b013506b8a73739901db161488cb054b2e4c56bd81330ed21958e3a5d5c56
-
Size
745KB
-
MD5
7f048f0a041c3cd706eed4e8790b55ef
-
SHA1
7c6beddbd23a6008772bf79d52f71c002272b201
-
SHA256
ba9b013506b8a73739901db161488cb054b2e4c56bd81330ed21958e3a5d5c56
-
SHA512
bd4d75e240c1568456135088355357842746a78fe1e6ada05b65f877fa9401ebca5a0122a2b1e414df029f7953c20d2b4d01e64403635a6dd2a0088b2ba017d0
-
SSDEEP
12288:7wlfSmomPZef0stYJ07fpKE618Sa7bZtPGGCnFXTJa4XPtqvyuP/N:qomxiyexNe8F7bvYvQFXN
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Suspicious use of SetThreadContext
-