Overview

overview

10

Static

static

3

9b6a12abda...e1.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    9b6a12abda74baca241611c608f244e8ec1fcb9207f602ef941326de7ef29be1
  • Size 818KB
  • Sample260912-lysbjshc92
  • SHA256 9b6a12abda74baca241611c608f244e8ec1fcb9207f602ef941326de7ef29be1
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
formbookeauudiscoveryratspywarestealertrojan

Malware Config

Extracted

Family

  • formbook

Campaign

  • eauu

Decoy

  • IRggpIEMsKxn0Rq4Id/GqZoQ

  • YX2UFOdW3jsCMwAvISAPjELmWQ==

  • lNnrH5nDcdiUyuj01Q==

  • DCE97vEWLg57mfJR/3dJ

  • C5Wv54zLS7Z9q3CFIlcz4w==

  • 7/QTus0ECeRZc8pTciuLfKQW

  • jJnfzQIu+9OvjtQB3w==

  • oq3NgpO8zLiABpQ8oy/GqZoQ

  • rg1m0qLva2gmo/lR/3dJ

  • i13E7HyuV3UlgN4=

  • ShB7qDZpBnA7esbjyA==

  • YWd19sUzzMApebWSBn5L

  • z5PaxhseO4jhyuj01Q==

  • tE+AicQIFwk1iORz

  • 1CNxuzuIlIRQehSgwoVP

  • +L4XEmOhp41SzkHMw8iJg14=

  • KSU96gdPZ082oLF8c8E=

  • 7Cxv2Jvcas6Yyuj01Q==

  • +odzOl2gtpPkB8/mYxgXjELmWQ==

  • uM3oo6EEgGfH3DjGwciJg14=

Targets

    • Target
      9b6a12abda74baca241611c608f244e8ec1fcb9207f602ef941326de7ef29be1
    • Size 818KB
    • SHA256 9b6a12abda74baca241611c608f244e8ec1fcb9207f602ef941326de7ef29be1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    eauudiscoveryformbookratspywarestealertrojan

    • Family: Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Formbook payload

      rat

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks