General

  • Target
    6fca0da799cc63ba982f310d9c0b5e7f4d19e5c4a48fa9abdc60bef6ee0af0c5.exe
  • Size 1003KB
  • Sample260810-rfkrmswsez
  • SHA256 6fca0da799cc63ba982f310d9c0b5e7f4d19e5c4a48fa9abdc60bef6ee0af0c5
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      6fca0da799cc63ba982f310d9c0b5e7f4d19e5c4a48fa9abdc60bef6ee0af0c5.exe
    • Size 1003KB
    • SHA256 6fca0da799cc63ba982f310d9c0b5e7f4d19e5c4a48fa9abdc60bef6ee0af0c5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: Formbook

      Formbook is a data stealing malware which is capable of stealing data.

    • Formbook payload

    • SmartAssembly .NET packer

      Detects SmartAssembly .NET packer.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks