Extracted

• • Target
    Vzukyqw_Signed_.exe
  • Size 623KB
  • SHA256 2467572968320c67ea46c765d9cdae94d3887e44d7af7e29b88f1b0e51fa4c01
  • MD5 9815a4eeaf97076ed028f1000e70a67a
  • SHA1 3abd3e16b8f28337201d5ab51c5a5b94eba51f40
  • SHA512 e1cbb8db39b2e1c59a14289d4dc17e569674b262ac592db38746131f06957e5604098542c721163016e7b3aeb7ee6e0bf88253bc2588b1f74e1925f40da0acd9
  • MD5 SHA1 SHA512

  Score

  10^/10

  rattrojanmodiloaderspywarestealerformbook

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • ModiLoader, DBatLoader

    ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    trojanmodiloader

  • Formbook Payload

    rat

  • ModiLoader First Stage

  • ModiLoader Second Stage

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2