General

  • Target

    SecuriteInfo.com.Trojan.Siggen9.60237.25494.7048

  • Size

    450KB

  • Sample

    200802-msb24bda7e

  • MD5

    52c7e073bdf2cc25f11ba8c75ebde95d

  • SHA1

    463d59d5b54ef4d880a67374b4d01687e0216f65

  • SHA256

    b64442a995a9b13bc92c58cb492ba2ca7a5c8d3a21ac26c6cda19faa42796ceb

  • SHA512

    08a6a4a1d932c90fb821e0356c1e297c113fbbde5def6542dd2459c53de5231a4d15feb4d663b3e24d57cab7aef349c3265b324b85a109be1bde06b5c9a8f380

Malware Config

Targets

    • Target

      SecuriteInfo.com.Trojan.Siggen9.60237.25494.7048

    • Size

      450KB

    • MD5

      52c7e073bdf2cc25f11ba8c75ebde95d

    • SHA1

      463d59d5b54ef4d880a67374b4d01687e0216f65

    • SHA256

      b64442a995a9b13bc92c58cb492ba2ca7a5c8d3a21ac26c6cda19faa42796ceb

    • SHA512

      08a6a4a1d932c90fb821e0356c1e297c113fbbde5def6542dd2459c53de5231a4d15feb4d663b3e24d57cab7aef349c3265b324b85a109be1bde06b5c9a8f380

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

    • Formbook Payload

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks