Overview

overview

10

Static

static

567088d301...e6.exe

windows7-x64

10

567088d301...e6.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    567088d3013ac44bc25ad9f0fcffdfe6.exe
  • Size 816KB
  • Sample221107-qlm9aahcd9
  • SHA256 3bac0715b2f1f0a408c7640ea62cea43789e92dc97caad6dfa206d6d805fb266
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
formbookmgahratspywarestealertrojan

Malware Config

Extracted

Family

  • formbook

Campaign

  • mgah

Decoy

  • Ga/EQGhABsbQ5owg2G/5oPZnI2A=

  • /3iTRooxSOJyM/D+2s12Yy9gTw==

  • 3GSDD14Chww6H7zCmD9ynHmX

  • Taq4VrZPNAxl7eUe34Q=

  • 3jAUg3OGzE9b/rLrwYKXqlyLPJTioHvYGg==

  • pyI17hAyA7tR+pso13D+ovZnI2A=

  • iQidpK8EE4ruTAEv

  • VoC+z/xSCeNxEcfl4A==

  • fNqiP5k6xGW8GMoEz2p9sQ==

  • UX434OsCal7/0Yg=

  • GZGI9uo1sTqPBaTYnn13rg==

  • oypWAhpp+ZigRPUVpC1JtYDeV+LP

  • UJJ25dHwenIU7JM=

  • FoUiKRg6Jq8387VRFNpzlQ1BRw==

  • M5P2HBpCkk2qMPQl

  • 6XMKM2j9QQAjOODfDf5tJ8Tp4mg=

  • icSTi3uo8bndiBUiIfwglQ1BRw==

  • MF6VwSbQ5av73I4=

  • cOqgfcgJaQBKrUa9szY8

  • FYJpLJEcOxwyGcTenNR1bfZnI2A=

Targets

    • Target
      567088d3013ac44bc25ad9f0fcffdfe6.exe
    • Size 816KB
    • SHA256 3bac0715b2f1f0a408c7640ea62cea43789e92dc97caad6dfa206d6d805fb266
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    formbookmgahratspywarestealertrojan

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks