Extracted

• • Target
    b88b53db5c1fd0779cb7718630d7ac90f0ff81cfc7e8495bff1325743adeff65
  • Size 303KB
  • SHA256 b88b53db5c1fd0779cb7718630d7ac90f0ff81cfc7e8495bff1325743adeff65
  • MD5 32a789f533962a3b74537fe4648944ef
  • SHA1 5bd15035cb0c90346112c1ceaa51ae3c1f7cb7af
  • SHA512 b67347465d70050a3b8c69e7019ff470ada290f9c80419f0e05006bee985dc8d4fd2dcf0f5f58ed66ace32f6fe71f9ba486e9a7abe02c87d70cff344d4c54937
  • SSDEEP 6144:pXFKo5lGhoBRQXvUv2K34mJgBNJGuOwIu/taVBrEFCfp9rJXoV6UzOLz3VcX+:pXRGhSv2OIP+w3/4VyopIc3LCX+
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbooksn26discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2
• • Target
    yplqoz.exe
  • Size 167KB
  • SHA256 8acf4c88e097cfcba3bfa08c24884c446bb943f5a3b5eb610f50db67574de771
  • MD5 c7e6dba02c269734255208e86e23fce8
  • SHA1 746596f46256c1752b7d101d0dc54d0baa64e29c
  • SHA512 b7c9a608fc3a82fcd7cfa3c6c8f7be3af9d028ffcef1e680f20364796ef8c4351759be036320ed203f785a04b0acd11d0d49217b557b36b5b50264e2b9448abf
  • SSDEEP 3072:wnqSbagMaHxt6YHJIKAi+jNcnfk9rJX/U8Gn:wnq2EYWbi+y
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbooksn26discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral3behavioral4