Extracted

• • Target

    a328bc2d66baa94dc748b1a450a0ede9601ff9ccec5ff2cfd043e669383ba295

  • Size

    240KB

  • MD5

    5c52be5501bfd96e7aa76bfa04b54e00

  • SHA1

    83efb1f56aff4dd969222f6ffd747be0a6d7a072

  • SHA256

    a328bc2d66baa94dc748b1a450a0ede9601ff9ccec5ff2cfd043e669383ba295

  • SHA512

    fed8633986c845d02d1a4a791d23fd0c4850b70b5e9ad2f7a107b350a7fccc7b991c2c061dbd13efc7649bcf773d456eed068deaa7e56c25cfff19894096de20

  • SSDEEP

    6144:HNeZmwyfaJ1I8cPNeraTn7t7OgwtQ5KzlQJzRRjaXNya5:HNlhCvI82jF7OPtQEUzRRu9ya5

  Score

  10^/10

  formbookmh76discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    agvoj.exe

  • Size

    65KB

  • MD5

    7e62ddeae0b2e64a1e2a2974d98a1c68

  • SHA1

    133f1f1ab8d1c223556ca51e4295d190ba9d0a59

  • SHA256

    58455bbff5636ff36755899c69ca4483f99a3fb0a7d5803cb8699d25e669f9e0

  • SHA512

    94d3e72000b82d31c0c2401935108e33e5abfa92ab525ca0ddbe6084c300150125d9787df4fa0805501b8c2f7b1ebd37d2301731a9ea07a26f66498ddab30779

  • SSDEEP

    768:AE0PommYXs53e6XRW/bqFb137/3u/9W0tSJi3TNKtc8WiMc0sWjcdZFHMC+9P:/J53e6h8b+3zA9JQc8FMTsWjcdZW

  Score

  3^/10

  discovery
  behavioral3behavioral4