Overview

overview

10

Static

static

SecuriteIn...23.exe

windows7-x64

10

SecuriteIn...23.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    SecuriteInfo.com.Win32.RATX-gen.21295.27123.exe
  • Size 947KB
  • Sample221208-ll4ttahe75
  • SHA256 082215d9272c7f706e6cc3b5f75abaa5e264566c1f6dec9fd0cd770d4bd86b4b
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
formbookasdoratspywarestealertrojan

Malware Config

Extracted

Family

  • formbook

Campaign

  • asdo

Decoy

  • 31/RFVD/FFkpCuo=

  • LS2evkT1Hf54yJ3A01ZhjLFKSw==

  • Dw25w8eoM4HRQ9T8YA==

  • F2rI9TgH1uCf

  • VOuuxD/qTPifG/QDJ76coQ==

  • 9smUEHwvvAcD3rnTM3IZg7fh

  • k4RlZq6jXYrfEg==

  • 1+E7QsiGloB8qoio4Oh/

  • dALS/H0nMg+jCtM1RpZ+

  • thNv9GMouDLIFvESJ76coQ==

  • Tc54uifIU66mck2hvrtXnVbp

  • cINUAYgiqlkpCuo=

  • ma2AwPyPmpxd2bPRMksak0T7uEg9kA==

  • RlMlYJ9UpFIz7dg1RpZ+

  • klG+mNmHrHcFhmZ12SNGhmN+0f6MaMs=

  • V/nT2VgHD+hito+tBumEzTyVl5g=

  • 0Zto8FjseN7v8MAW6ZkZg7fh

  • gbGlkddlXYrfEg==

  • pymXGHouvjhnKg8+qD8bLcY=

  • VelU01Tk/+CzegtywL4=

Targets

    • Target
      SecuriteInfo.com.Win32.RATX-gen.21295.27123.exe
    • Size 947KB
    • SHA256 082215d9272c7f706e6cc3b5f75abaa5e264566c1f6dec9fd0cd770d4bd86b4b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    formbookasdoratspywarestealertrojan

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks