General
-
Target
91fc06743f28fe6510f6e23c02532b67519f6bdc4ab6f93c0aa14abb8225d60e
-
Size
898KB
-
Sample
221212-kjn5xadf4w
-
MD5
7f37446c529d8ce59208e12675cce9e0
-
SHA1
91d54359735d391e03ecc5b7c222055e9aab71a3
-
SHA256
91fc06743f28fe6510f6e23c02532b67519f6bdc4ab6f93c0aa14abb8225d60e
-
SHA512
692b59cd9bc84e48bb3927d3c962739cf71fd0a40b8ede156c5805693b44031ef69e38d98f11d984296519bf3c45380202306a786527254b63406706773a7c8c
-
SSDEEP
12288:U/JkKsIMm9Yjld9wfTgbnkVkns2xNU2jtqi2IdUmF/rNmF4yKxXGi:bKs+9Yx3wfTgP/NJwZIqK/rNC+gi
Malware Config
Extracted
formbook
w086
F6jSz+l9QmYXguG/xUipf/6ixrik
cQZre8twfBVOOJgLenGTGA==
pG5kW2/wqwEOCVxZ
KORXeYwt7wF8J3BR
HL0ZdBMjeHet
TR57b4Yi6wJ8J3BR
fRyK2yaqeDRGHiQTTw==
RwhsqfRxABNZS59wenGTGA==
GuZaY4H4ahcWKjUdVg==
I5C4/Wyz3fglj+o=
Te5QPEu3NjZ0P58LenGTGA==
M9YJLwifZIi9pfnj2Nj/kA6+ZlU=
c/JFdRndG8f/HiQTTw==
nMmcD1UjeHet
QWR7+9Rh8/l8J3BR
9MD+BzOyI6mXtM4w6LMyEA==
WABgaYPqdJzl2TviGbdH
02OexRebqj3+U2kXhQ0=
j17M2R3/fQwFHiQTTw==
dQpReYss5/l8J3BR
Targets
-
-
Target
91fc06743f28fe6510f6e23c02532b67519f6bdc4ab6f93c0aa14abb8225d60e
-
Size
898KB
-
MD5
7f37446c529d8ce59208e12675cce9e0
-
SHA1
91d54359735d391e03ecc5b7c222055e9aab71a3
-
SHA256
91fc06743f28fe6510f6e23c02532b67519f6bdc4ab6f93c0aa14abb8225d60e
-
SHA512
692b59cd9bc84e48bb3927d3c962739cf71fd0a40b8ede156c5805693b44031ef69e38d98f11d984296519bf3c45380202306a786527254b63406706773a7c8c
-
SSDEEP
12288:U/JkKsIMm9Yjld9wfTgbnkVkns2xNU2jtqi2IdUmF/rNmF4yKxXGi:bKs+9Yx3wfTgP/NJwZIqK/rNC+gi
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Suspicious use of SetThreadContext
-