Extracted

• • Target

    ad43937eb3ac4cfd6bd460642102eafdd1d2007bdbd369e3db624613284c325c.exe

  • Size

    254KB

  • MD5

    7e86663fc95e3f20293b31f0cd963035

  • SHA1

    2836048b1082fc7d3e6c7e7bbb6557b03b0b953c

  • SHA256

    ad43937eb3ac4cfd6bd460642102eafdd1d2007bdbd369e3db624613284c325c

  • SHA512

    4e629deff964155575d7f92cc2cbc35389f2c00de83a51389d9cffd170cde450acfd7ffa0eb9616535ea0a38587cd6b5917303bea0994960f9531fc7e6109df9

  • SSDEEP

    6144:wBlL/caJNKQfAY5g28QFjaHWXJ4a2cqaplKYHPlFbfUwndzE0M1:CeavTIYtjaH9cqklvP/dzE0M1

  Score

  10^/10

  formbooks3dydiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    $PLUGINSDIR/gtlbztpsztf.dll

  • Size

    49KB

  • MD5

    6432c43cc5cb60bb4a484470e8693ab3

  • SHA1

    78f0e1e34dbee0fee48d70949ff07deef94215bc

  • SHA256

    e21a1e1f87a1c05b1c97688f72fce20e5f1c42f8579b49d189b3e06f3be8a735

  • SHA512

    760c3906675ca690b23e195a7b4c295289dc6242e096ca3140fc199e41474fff7df0500243bde937e4e5ab311d2c4969f02b8b3d87b97bd26d3c3feee5a5ef6e

  • SSDEEP

    768:M57MzH3v2IihsP+l1nrk2IJ1/95UrpRxKZfUJXeykaxLT+QZv6qCGb:M57ohP+l1rktZ5qpWZf0XeyVxDd6/Gb

  Score

  10^/10

  formbooks3dydiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral3behavioral4