Overview

overview

10

Static

static

Swift copy.exe

windows7-x64

10

Swift copy.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    Swift copy.exe
  • Size 925KB
  • Sample220910-vt9jpsadd9
  • SHA256 69870e2a61815839fdc55f251a07c89580dc6c1725f850288c4dc190c08b7175
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
formbookejgpratspywarestealertrojan

Malware Config

Extracted

Family

  • formbook

Campaign

  • ejgp

Decoy

  • +0NM3RekW0bfgQ==

  • iQmI3Aw2aoOljoA0XZi1

  • 5Ei2CVwQyOgZwV/u4eiMFdKqc84=

  • ImSvoul9o0reZ9TKUAUkXgw=

  • kuCrMIco5vT3sxCUQ+pYsVoG7Q==

  • btgpLo8XM+qHGLzoizgjRg==

  • fqK2iM5vW0bfgQ==

  • ObS1UE+TByKRZozamdULr0naXbKPLA==

  • bcohBkmNNcpp3gJ/XE2/mBs=

  • yY5b/cLb3+0llg==

  • GVEVqBNXl7Kic2Sm

  • Tqpt2tTlW0bfgQ==

  • eurYRI7UFDBjDbzpIJKz

  • 7wwDuczemAaJNrrpIJKz

  • bprQyLvLEj+hhMLHHg==

  • qdoAqq/XOjh0ItzLLJpHBgxoJgM2

  • gr5SnMA66BpM8+hUM+iawNKeZsQ=

  • XLoO6yFTsdNuEYpUPfScwqXEk7dqBnU=

  • vS2Cjfg0tqBF1GpuHemLV8/g4wUwPspS

  • U5wqXJjP/u/qg3sE+YKsgVVByFw+

Targets

    • Target
      Swift copy.exe
    • Size 925KB
    • SHA256 69870e2a61815839fdc55f251a07c89580dc6c1725f850288c4dc190c08b7175
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    formbookejgpratspywarestealertrojan

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks