Overview

overview

10

Static

static

99f0650c57...8c.exe

windows7-x64

1

99f0650c57...8c.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    99f0650c57684b159e2c8d831c1f81eab29259344507a3652f4be5ea4dca928c.exe
  • Size 747KB
  • Sample230106-rb5k9ace4x
  • SHA256 99f0650c57684b159e2c8d831c1f81eab29259344507a3652f4be5ea4dca928c
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
formbookg44nratspywarestealertrojan

Malware Config

Extracted

Family

  • formbook

Campaign

  • g44n

Decoy

  • t60gB4YRvsDLttd9HG4=

  • xck8G7COQ+g7VIpX

  • BQQF3mmpLPskhQ==

  • eLWwmzNyK6ee+nF1jDvvkxuSGA==

  • 3tlgNOzw8BBjpNOQMnc=

  • nOpNEJhoU0h+00S9E1YfgA==

  • xcvTpljkjIyEdvhp+VcGFtJC

  • bZxOHr5CtzY4

  • rOD304X0u1DN/m7cbA==

  • Knixl0HJyEOOiNckwk8GFtJC

  • S4JMDRNTUAol

  • Vp9wSwNZSfY7VIpX

  • 0Nf/zlrpmpahnM+tpkYGFtJC

  • joXsuHiBcVp88DHEHMA7

  • yN8i9ppoZYHSSaqqk6NZnQ==

  • 4UFEMfyKhSB4UovzjdabqolwhFtMH1M=

  • d3RiRcXCeR8wlgjEHMA7

  • eMUS8PSBPCe2rPg=

  • LCsR0X328UuSAmlf

  • /keifSXopayqjLt1EWQ=

Targets

    • Target
      99f0650c57684b159e2c8d831c1f81eab29259344507a3652f4be5ea4dca928c.exe
    • Size 747KB
    • SHA256 99f0650c57684b159e2c8d831c1f81eab29259344507a3652f4be5ea4dca928c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    formbookg44nratspywarestealertrojan

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks