Overview

overview

10

Static

static

3

SecuriteIn...41.exe

windows7-x64

10

SecuriteIn...41.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    SecuriteInfo.com.Win32.MalwareX-gen.13799.5541.exe
  • Size 663KB
  • Sample250210-e2wd2s1qat
  • SHA256 02bab1bd1860192821c46d83a7fdf46be17a34788db60d45e6004e7a30f110d6
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
formbookda16discoveryratspywarestealertrojan

Malware Config

Extracted

Family

  • formbook

Version

  • 4.1

Campaign

  • da16

Decoy

  • ft-check-srv93832.top

  • etkudoaccounting.xyz

  • leaning-jobs-60467.bond

  • tylebytwocrows.online

  • yedzio.xyz

  • in-up-casino-oga1.top

  • 94wr502uvd.shop

  • rpa.xyz

  • ankdavr.sbs

  • ertifiedpestpros.info

  • rain-pipe-cleaning-42343.bond

  • uhtikuu.pro

  • eddingsopulentvow.beauty

  • reakfreellc.biz

  • acetech.net

  • adelforbattle.info

  • oans-credits-49540.bond

  • apermountains.net

  • sohxtkn.xyz

  • qersu.info

Targets

    • Target
      SecuriteInfo.com.Win32.MalwareX-gen.13799.5541.exe
    • Size 663KB
    • SHA256 02bab1bd1860192821c46d83a7fdf46be17a34788db60d45e6004e7a30f110d6
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    formbookda16discoveryratspywarestealertrojan

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Formbook family

      formbook

    • Formbook payload

      rat

    • Downloads MZ/PE file

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks