Extracted

• • Target

    U prilogu je nova lista narudzbi.exe

  • Size

    1.0MB

  • MD5

    3df77cd9b148f741aabafae673c30c15

  • SHA1

    40799ad5fbf94780eccd795ef07e77303b6638d9

  • SHA256

    0080c65d479bdb2212ce757c8c874b8d10e2c341a557b40e5e4a1e97b889f1dd

  • SHA512

    f453160682183f45e909b1e489e1c20ad3197d4327e57cb151f36765c70dea2b084c5ab2787cb6263f1aebaaabfff91ebbea54042d54227781468027e0410d91

  • SSDEEP

    24576:v6R9yfVUXwTEfF59XADz3OjaZQQJ0nhUGfAp7LM:v6mO0MF59XADzejakuGfA1M

  Score

  10^/10

  formbookmodiloader3noppersistenceratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • ModiLoader, DBatLoader

    ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    trojanmodiloader

  • Formbook payload

    rat

  • ModiLoader Second Stage

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2