Overview

overview

10

Static

static

3

SecuriteIn...26.exe

windows7-x64

10

SecuriteIn...26.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    SecuriteInfo.com.Win32.Malware-gen.9919.8426.exe
  • Size 886KB
  • Sample230803-d1b4caba75
  • SHA256 fb6d0c9f8246ae9fafae10a3ed496220f6b2803e454a1da51f07a6dcda5df7b4
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
formbookfg01ratspywarestealertrojan

Malware Config

Extracted

Family

  • formbook

Version

  • 4.1

Campaign

  • fg01

Decoy

  • kohzyzb.xyz

  • freehdonlineporn.xyz

  • fitflextr.com

  • jinxiu3.top

  • malditabelleza.online

  • shopfloraflair.com

  • dohrolling.com

  • newadvice4u.com

  • beerexperiment.com

  • kppjmmrp.cfd

  • precinctautomotors.com

  • energia-online.net

  • mountaingoodnessrewards.site

  • ibexpertmasterkey.com

  • rzunirnk.cfd

  • mblhzbno.cfd

  • n-g.vip

  • mintakacom.store

  • fnpdhhdx.cfd

  • zenfulgoods.com

Targets

    • Target
      SecuriteInfo.com.Win32.Malware-gen.9919.8426.exe
    • Size 886KB
    • SHA256 fb6d0c9f8246ae9fafae10a3ed496220f6b2803e454a1da51f07a6dcda5df7b4
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    formbookfg01ratspywarestealertrojan

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Formbook payload

      rat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks