General

  • Target
    RFQ25101.exe
  • Size 692KB
  • Sample251114-cqbjdstles
  • SHA256 a261dd696014b1ee8348bef04980efda5d762a6563a08c0256d5f09fec1a8cd7
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      RFQ25101.exe
    • Size 692KB
    • SHA256 a261dd696014b1ee8348bef04980efda5d762a6563a08c0256d5f09fec1a8cd7
    • MD5 SHA1 SHA512 SSDEEP
    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

    • Formbook family

    • Formbook payload

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v16

Tasks