Overview

overview

10

Static

static

3

d8b86b1715...05.exe

windows10-2004-x64

10

d8b86b1715...05.exe

windows11-ltsc_2024-x64

10

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    d8b86b1715fdb7b92a937c7c35bf952488d08de884478bb8cd66ee3317879005.exe
  • Size 277KB
  • Sample260720-rdt8asct8k
  • SHA256 d8b86b1715fdb7b92a937c7c35bf952488d08de884478bb8cd66ee3317879005
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
formbookdiscoveryexecutioninstallerratspywarestealertrojan

Malware Config

Targets

    • Target
      d8b86b1715fdb7b92a937c7c35bf952488d08de884478bb8cd66ee3317879005.exe
    • Size 277KB
    • SHA256 d8b86b1715fdb7b92a937c7c35bf952488d08de884478bb8cd66ee3317879005
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    discoveryexecutionformbookratspywarestealertrojan

    • Family: Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Formbook payload

      rat

    • Loads dropped DLL

    • Suspicious use of NtCreateThreadExHideFromDebugger

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2
    • Target
      $PLUGINSDIR/System.dll
    • Size 11KB
    • SHA256 fa4ab1d6f79fd677433a31ada7806373a789d34328da46ccb0449bbf347bd73e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral3behavioral4
    • Target
      $PLUGINSDIR/nsDialogs.dll
    • Size 9KB
    • SHA256 f2c1409faf2952c1c91f4b5495158ef5c7d1a1db6eea4a18f163574bd52fcad0
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral5behavioral6
    • Target
      $PLUGINSDIR/nsExec.dll
    • Size 6KB
    • SHA256 288100583f65a2b7acfc0c7e231c0e268c58d3067675543f627c01e82f6fd884
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral7behavioral8

MITRE ATT&CK Enterprise v16

Tasks