Overview

overview

10

Static

static

SecuriteIn...88.exe

windows7_x64

10

SecuriteIn...88.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SecuriteInfo.com.BackDoor.SpyBotNET.17.10332.27788

  • Size

    455KB

  • Sample

    200801-7t54knswfn

  • MD5

    8c5fad5ff5c2c0af9ce18b5130f3d43c

  • SHA1

    0e2cb2a9fd256afdb2a877fa0b8fbe6c7d30c6b4

  • SHA256

    f11bf0f5b97161b5d27b4cbbc02fae52957df15646513874df10bc06d1d4e5df

  • SHA512

    c3ecee109de715fb49ca3e8fd35b598c01ff59ccaf377bfb3b2f5d8463bad6e469a89f8dd56cdae3781335a72e3eb695c7dd4f675f9f64712e97f9fea5fafed2

Score
10/10
formbookratspywarestealertrojan

Malware Config

Targets

    • Target

      SecuriteInfo.com.BackDoor.SpyBotNET.17.10332.27788

    • Size

      455KB

    • MD5

      8c5fad5ff5c2c0af9ce18b5130f3d43c

    • SHA1

      0e2cb2a9fd256afdb2a877fa0b8fbe6c7d30c6b4

    • SHA256

      f11bf0f5b97161b5d27b4cbbc02fae52957df15646513874df10bc06d1d4e5df

    • SHA512

      c3ecee109de715fb49ca3e8fd35b598c01ff59ccaf377bfb3b2f5d8463bad6e469a89f8dd56cdae3781335a72e3eb695c7dd4f675f9f64712e97f9fea5fafed2

    Score
    10/10
    rattrojanspywarestealerformbook

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Formbook Payload

      rat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks