General
- Target 2343153b281c09a75624788bf36ec4ce24b03fa49765c2cca1fa025981b758dc.exe
- Size 285KB
- Sample260825-ajqcvsvgpd
- SHA256 2343153b281c09a75624788bf36ec4ce24b03fa49765c2cca1fa025981b758dc
Score
10/10
Malware Config
Targets
-
- Target 2343153b281c09a75624788bf36ec4ce24b03fa49765c2cca1fa025981b758dc.exe
- Size 285KB
- SHA256 2343153b281c09a75624788bf36ec4ce24b03fa49765c2cca1fa025981b758dc
Score10/10-
Family: Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook payload
-
Loads dropped DLL
-
Suspicious use of NtCreateThreadExHideFromDebugger
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 fa4ab1d6f79fd677433a31ada7806373a789d34328da46ccb0449bbf347bd73e
Score3/10 -
- Target $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 f2c1409faf2952c1c91f4b5495158ef5c7d1a1db6eea4a18f163574bd52fcad0
Score3/10 -
- Target $PLUGINSDIR/nsExec.dll
- Size 6KB
- SHA256 288100583f65a2b7acfc0c7e231c0e268c58d3067675543f627c01e82f6fd884
Score3/10