Overview

overview

10

Static

static

SecuriteIn...12.exe

windows7-x64

10

SecuriteIn...12.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    SecuriteInfo.com.Win32.MalwareX-gen.25622.30312.exe
  • Size 966KB
  • Sample230111-2fcfdaae2z
  • SHA256 249eaf070dfdfb8a8cdc2487a960ee487bafca7c385750f73579eb5ea6dc1997
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
formbookg44nratspywarestealertrojan

Malware Config

Extracted

Family

  • formbook

Campaign

  • g44n

Decoy

  • t60gB4YRvsDLttd9HG4=

  • xck8G7COQ+g7VIpX

  • BQQF3mmpLPskhQ==

  • eLWwmzNyK6ee+nF1jDvvkxuSGA==

  • 3tlgNOzw8BBjpNOQMnc=

  • nOpNEJhoU0h+00S9E1YfgA==

  • xcvTpljkjIyEdvhp+VcGFtJC

  • bZxOHr5CtzY4

  • rOD304X0u1DN/m7cbA==

  • Knixl0HJyEOOiNckwk8GFtJC

  • S4JMDRNTUAol

  • Vp9wSwNZSfY7VIpX

  • 0Nf/zlrpmpahnM+tpkYGFtJC

  • joXsuHiBcVp88DHEHMA7

  • yN8i9ppoZYHSSaqqk6NZnQ==

  • 4UFEMfyKhSB4UovzjdabqolwhFtMH1M=

  • d3RiRcXCeR8wlgjEHMA7

  • eMUS8PSBPCe2rPg=

  • LCsR0X328UuSAmlf

  • /keifSXopayqjLt1EWQ=

Targets

    • Target
      SecuriteInfo.com.Win32.MalwareX-gen.25622.30312.exe
    • Size 966KB
    • SHA256 249eaf070dfdfb8a8cdc2487a960ee487bafca7c385750f73579eb5ea6dc1997
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    formbookg44nratspywarestealertrojan

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks