Overview

overview

10

Static

static

SecuriteIn...20.exe

windows7-x64

10

SecuriteIn...20.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    SecuriteInfo.com.Trojan.Packed2.44634.18408.4820.exe
  • Size 917KB
  • Sample221122-e6jaaaad29
  • SHA256 c30a52af8e6fdb816ad1efea8ad00af616202cdd9df1fccaa85d744da35f65e1
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
formbookcfvcratspywarestealertrojan

Malware Config

Extracted

Family

  • formbook

Campaign

  • cfvc

Decoy

  • qFcyI8OAPHKap6ubfQ==

  • NuOCNnr/zOqy1xM5AN4=

  • CnHfypZMLKQKgKaaVw4J1g==

  • 9WpDFnsiwEyoFko7+GYiyo55

  • zUKhZPi3f21+ux+L

  • vqqeiTTPlz+cnQaD

  • GLGZh9zop+UvsCtBEm9x

  • eCUGyUEAe9hmj8KgaA==

  • EvXUn0s63zJyoxQfCGQmMZRu

  • kVy6iO/FuRGD/A==

  • +tg0M82KQk7fX4XXoYIluHMEFhbrzMk=

  • hP/nqutI9DR+0mBnYA==

  • cwrq1kLJd9QzqtQq9QCc7hHV9FjjKSvU

  • eE6vlcLHxAHZ7g==

  • vpKQL84+30y4SZpU/Ox5

  • vbfnlWZmAj1aVbCdbA==

  • UNQwEfT8tzbiL3J2Wrjm3g==

  • 02LLqYRY9SeDIHwK5pFjYrg=

  • PhkLzj8IuT6R7v3lxlBYwqO69HReqnrF

  • mkYwC5lsF6cDS6RU/Ox5

Targets

    • Target
      SecuriteInfo.com.Trojan.Packed2.44634.18408.4820.exe
    • Size 917KB
    • SHA256 c30a52af8e6fdb816ad1efea8ad00af616202cdd9df1fccaa85d744da35f65e1
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    formbookcfvcratspywarestealertrojan

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks