Extracted

• • Target

    b88b53db5c1fd0779cb7718630d7ac90f0ff81cfc7e8495bff1325743adeff65

  • Size

    303KB

  • MD5

    32a789f533962a3b74537fe4648944ef

  • SHA1

    5bd15035cb0c90346112c1ceaa51ae3c1f7cb7af

  • SHA256

    b88b53db5c1fd0779cb7718630d7ac90f0ff81cfc7e8495bff1325743adeff65

  • SHA512

    b67347465d70050a3b8c69e7019ff470ada290f9c80419f0e05006bee985dc8d4fd2dcf0f5f58ed66ace32f6fe71f9ba486e9a7abe02c87d70cff344d4c54937

  • SSDEEP

    6144:pXFKo5lGhoBRQXvUv2K34mJgBNJGuOwIu/taVBrEFCfp9rJXoV6UzOLz3VcX+:pXRGhSv2OIP+w3/4VyopIc3LCX+

  Score

  10^/10

  formbooksn26discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    yplqoz.exe

  • Size

    167KB

  • MD5

    c7e6dba02c269734255208e86e23fce8

  • SHA1

    746596f46256c1752b7d101d0dc54d0baa64e29c

  • SHA256

    8acf4c88e097cfcba3bfa08c24884c446bb943f5a3b5eb610f50db67574de771

  • SHA512

    b7c9a608fc3a82fcd7cfa3c6c8f7be3af9d028ffcef1e680f20364796ef8c4351759be036320ed203f785a04b0acd11d0d49217b557b36b5b50264e2b9448abf

  • SSDEEP

    3072:wnqSbagMaHxt6YHJIKAi+jNcnfk9rJX/U8Gn:wnq2EYWbi+y

  Score

  10^/10

  formbooksn26discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral3behavioral4