Overview

overview

10

Static

static

c8a4cfffb0...44.exe

windows7-x64

10

c8a4cfffb0...44.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    c8a4cfffb04d6f2600fab0c1cbc55a44.exe
  • Size 800KB
  • Sample220929-ej3emsagdk
  • SHA256 4072ef77c0ab086cc41e0e997d147b0bf5e8473db4c34eaa4a9024fc7207c18c
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
formbooknogsratspywarestealertrojan

Malware Config

Extracted

Family

  • formbook

Campaign

  • nogs

Decoy

  • 0QX/9DdhLWWLw7Pwzfhf5yU=

  • 4ME/nPMH090p8HPEGx5dVxLO

  • qKR7eOYftf1zXiEifMYvLmMuJg==

  • JJSU5dw5YXD0d2s8DX8=

  • Oswop1ZfvA3184JL

  • oRINXD2zP3SqX+VhbbWt

  • EuBl9mCqx1y+OGz4xPhf5yU=

  • HzQUJOyHZZ8aiproM/hf5yU=

  • Uz0PDH6iU5rKxfLIKw==

  • 2Rj67a0BR3Xm3ZRhbbWt

  • caiYqWzga7w/VJeL+2g=

  • ZsarhfIos/sWa2s8DX8=

  • S7mv5KwdA0xKms4=

  • XIJ2cLXbwB1Pj5bgwvhf5yU=

  • bvZO26EFz88k+qlDE5C7O74qeDs=

  • S6iEuJr2zx69SpFFWaCn

  • CuBpAne3DF+cX+JhbbWt

  • S8EsyZv10glJAms8DX8=

  • z7UwlfUb//w3/HTBISh0HTI=

  • sN5pmG1ziZE=

Targets

    • Target
      c8a4cfffb04d6f2600fab0c1cbc55a44.exe
    • Size 800KB
    • SHA256 4072ef77c0ab086cc41e0e997d147b0bf5e8473db4c34eaa4a9024fc7207c18c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    formbooknogsratspywarestealertrojan

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks