Extracted

• • Target

    ccac04114dca63da18b7f5bbb4b243630c0c0336a1c222dd9b46087dae66dfdf.exe

  • Size

    268KB

  • MD5

    073d69b074ae7324ff0b8e49f3d1e5a6

  • SHA1

    f032a64fea6e799b7654ed04a97ab59ef1ef09bd

  • SHA256

    ccac04114dca63da18b7f5bbb4b243630c0c0336a1c222dd9b46087dae66dfdf

  • SHA512

    3ae5e711490bd56ab988f2a9c5832d2c4b4f5bc66d75384a268b1323fb898356d04b13e5a95228194bdc16b833e6e56c2abf554cfc72d703700d0caf90029a70

  • SSDEEP

    6144:zjgwH2tOwzHk+729OhFYMpvxYMO3OKuRBC10MoBu73m:owIOwzHZDheuv+Nx/1OZ

  Score

  10^/10

  formbooks1k3discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    mqfvdjq.exe

  • Size

    70KB

  • MD5

    1375d6ebdb70a3099887a5e1ea4c9769

  • SHA1

    1a2ed11d9428c34de0d60fdb2bb7c735e99d9382

  • SHA256

    622e49fda8e46b80ebfef2b6d2180a9a425d07525b962e1e4471088431b183c2

  • SHA512

    08b030d32251cd4879732cae94c86038d6970519c6efbc7356ddeebc000002a704170517e8a567f37b54238bc498756dc459da6323fe33ae7486a55de63f57e8

  • SSDEEP

    1536:TSfyG8qhxb+q8AyMAtc8jpsWjcdRq6tl7:ayGt+qGhjWYKl

  Score

  3^/10

  discovery
  behavioral3behavioral4