General
-
Target
SecuriteInfo.com.Variant.Lazy.272801.18738.11677.exe
-
Size
326KB
-
Sample
221209-sxg8hsdd98
-
MD5
40f024d22078235192eab316f30e5c15
-
SHA1
1a5502661d3f471421dff3f0222b2d4b70374594
-
SHA256
89f3942d0650523481efd8158b4ced2f49b41fba883983c4fd6fd94651b51a68
-
SHA512
e07ce98e7ad37b93404a91b3629c7d92185b39c7329e88dd3803f5c78c2157fbdc0fab7b5e3b28056c81eee92f8d62a64450e325d9e0224328852237ea832880
-
SSDEEP
6144:WhsAgx7hsjFbtWIzu258HK8zTygDCaq2ue7WTsT+g2EKAUcAM2q:4ch2jY429q2BOsTf2iUDMx
Malware Config
Extracted
formbook
ermr
ErOK6LFCgNIAlQmH54oaYOL/CN29Z78=
qNSdDhu/PT/1fgafDagiCSZH1SY=
wLpPOAkYS8EABl3pHGc4hNT/Q1sHBrU=
jSxRvptHkeTGl7PT0SEmaZmjqzanuA==
b91oL+2wCcpyhnd6yvF6Pg==
mr81yp1/qqZX
hy7Xsz/PU/LWHMcGL4UYJx9n3A==
KlwrHt1gouPaXaWhoQ==
ng8M320IRJL9Ptw=
8GQbOXuaWxvKnNM=
XndOL7E5sNpVUNty4d/a
rryPBBC8PybYb+2h2MF3FHGL
kEoeyERSVCYO0g==
5/P+SBDby5hO
1fYXc30/h9W7iO17
34X+YKR+wRFE
8ir/X2MlVByh5lQ1ow8=
u9ikm2UMZ7J7hpCYow==
FLI+c3clp1BNDjVAfvC2Dnw=
t21Erq8/r09wAzAJTAH3Ng==
Targets
-
-
Target
SecuriteInfo.com.Variant.Lazy.272801.18738.11677.exe
-
Size
326KB
-
MD5
40f024d22078235192eab316f30e5c15
-
SHA1
1a5502661d3f471421dff3f0222b2d4b70374594
-
SHA256
89f3942d0650523481efd8158b4ced2f49b41fba883983c4fd6fd94651b51a68
-
SHA512
e07ce98e7ad37b93404a91b3629c7d92185b39c7329e88dd3803f5c78c2157fbdc0fab7b5e3b28056c81eee92f8d62a64450e325d9e0224328852237ea832880
-
SSDEEP
6144:WhsAgx7hsjFbtWIzu258HK8zTygDCaq2ue7WTsT+g2EKAUcAM2q:4ch2jY429q2BOsTf2iUDMx
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Suspicious use of SetThreadContext
-