Extracted

• • Target
    Potvrda narudzbe u prilogu.exe
  • Size 858KB
  • SHA256 2fa540a1679ecd37874e53b50eb4c756223420d5f970c935ce053345f1f231f4
  • MD5 a2f2b4df19c4e17b1ee75386984be107
  • SHA1 4eeb4fa7a57f39c7e0e33f069da955086926976a
  • SHA512 c69eb0311d8e9d760f7ab33568b56836645dadf9c41271e0ef494816d3ba3a24c1a119e9359950fda5bdc92f2f38fe3bb99e346977ed935cc119ba0c690dab64
  • MD5 SHA1 SHA512

  Score

  10^/10

  modiloaderpersistencetrojanformbook3nopratspywarestealer

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • ModiLoader, DBatLoader

    ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    trojanmodiloader

  • Formbook Payload

    rat

  • ModiLoader Second Stage

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2