Extracted

• • Target

    Ziraat Bankası Swift Mesajı.exe

  • Size

    213KB

  • MD5

    f2709d58d0876f2f996e3ed7f80e8a35

  • SHA1

    4c86929c776b27a80de42113963e8ba309e67bb7

  • SHA256

    66a3bd7fa8f6c6f0fbeb6afa6f5b13ae1c2e09600d17e49d94556f680f5a277b

  • SHA512

    46aebb672626ea7924ab256782ce7a1c0de9b5ebf9da794e8edb886a187b47a719f79886f60849df46b37f5cff39250d208703339ce0c4e44f4fb6c40cabd9a7

  • SSDEEP

    6144:HNeZmx8VObAOHDOScqKwgSTwB95PnbjbvLAZSOgAurZAm/qY:HNly4bfySXK5n5PbjbHRhZABY

  Score

  10^/10

  formbookmh76discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    aqfvej.exe

  • Size

    3KB

  • MD5

    8762d96314aa376a765ea0ab07cb9637

  • SHA1

    8e91d715bc8a617d2b2fe81dc0b6ffce1e3bafb5

  • SHA256

    428ffb3962cd0c5758cf842792b131bcecb57a8014b42af2820395277b6a5574

  • SHA512

    a366b2d2506852eb589aa2a1a3360413d48d6b081a23e131f4c6c12f9b65afa0db87d3d533da6d299c5a6f8903a76be1bc59a7235088ebe7b257daef67866b94

  Score

  3^/10

  discovery
  behavioral3behavioral4