General

  • Target
    16b00ba80d620b2f3730e16f9c806802fc9bbffe78a3d2911ccf7792b2bb41fd
  • Size 986KB
  • Sample260825-npzqdaxybs
  • SHA256 16b00ba80d620b2f3730e16f9c806802fc9bbffe78a3d2911ccf7792b2bb41fd
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      URGENT RFQ/duVEAHdmugf5n7V.exe
    • Size 1.1MB
    • SHA256 5dcc1d7100b1e6f2562364e410f5a31f4353c0d6487451d6ae8c4336a2375fea
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: Formbook

      Formbook is a data stealing malware which is capable of stealing data.

    • Formbook payload

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks