General

  • Target
    New Quote.exe
  • Size 1.1MB
  • Sample260720-pgbt1shx7p
  • SHA256 256ef225565388227fd67c6e4a8c6e1990df8f660fb4504813c31bd57d9269cb
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      New Quote.exe
    • Size 1.1MB
    • SHA256 256ef225565388227fd67c6e4a8c6e1990df8f660fb4504813c31bd57d9269cb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: Formbook

      Formbook is a data stealing malware which is capable of stealing data.

    • Formbook payload

    • .NET Reactor proctector

      Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks