General

  • Target
    quote.exe
  • Size 1.1MB
  • Sample260723-gnvxgagh93
  • SHA256 198906594ae1cb1951d6e75e1921a7dd1188c8356371b847556ff15226dc5e83
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      quote.exe
    • Size 1.1MB
    • SHA256 198906594ae1cb1951d6e75e1921a7dd1188c8356371b847556ff15226dc5e83
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: Formbook

      Formbook is a data stealing malware which is capable of stealing data.

    • Formbook payload

    • .NET Reactor proctector

      Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks