Resubmissions

01-06-2024 17:26

240601-v1b7saad53 10

01-06-2024 17:08

240601-vn2lxahd3t 10

01-06-2024 16:56

240601-vfzscahg88 10

01-06-2024 16:43

240601-t8ga2agh31 10

01-06-2024 15:54

240601-tcf1dsga81 10

General

  • Target

    Trojan;MSIL.FormBook.AFO!MTB.zip

  • Size

    196KB

  • MD5

    7b62401dd82be69f3f95f7883fc7e0d9

  • SHA1

    6adab9ef01fec2977a9c6cb3f6ff60b01fed124f

  • SHA256

    69811fd3a031d56a72428c7f3f74573b551c2dc9b5fb827fe6740a03eae55f31

  • SHA512

    faf526a594d2dec297072f66cb5db65b32f2313ffa5f2e25f66a85e40f51b1effcf1f40e02b2e62382275414c6acd3212b30d78855c3ce70f4bd54949840df15

  • SSDEEP

    6144:jHgkWXiqhrYVZCmZLZ5r8n2ys/xdbFqm2WJ:yX1hUbLZJ88PbMm2M

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • Trojan;MSIL.FormBook.AFO!MTB.zip
    .zip
  • New Text Document.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Trojan;MSIL.FormBook.AFO!MTB.exe
    .exe windows:5 windows x86 arch:x86

    75e9596d74d063246ba6f3ac7c5369a0


    Headers

    Imports

    Sections

  • Пароли Chrome.csv