Extracted

• • Target

    vbc.exe

  • Size

    213KB

  • MD5

    bc5a96f61123cabe7548508cf1110f17

  • SHA1

    06c4ef9c85992a67ce7c47f4444a0dfa608ec8b4

  • SHA256

    cad40a730db37853650add2b302af798fb0eb43cb266f51f78d927d487ad0f46

  • SHA512

    6e8def6a14f52e8453dd5bdd7fafdfec0e1077c55930dd62874628ebd0be2285efe0f450377aa6e03b05cf12bf3262400d03e8f61ad9d6b8acd62341b3493fc4

  • SSDEEP

    6144:HNeZmkoyJNxDPG4UFiYt4PiDEMluuQIYVQMY3qnvnS:HNl7YpVUIfP0HMTvnS

  Score

  10^/10

  formbookm0e8discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Uses the VBS compiler for execution

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    acopa.exe

  • Size

    3KB

  • MD5

    e1bdd88f9c59014060629315d11e8bc7

  • SHA1

    37abe5447c0697558e5eb2e1a0cb6cd8ea9fda01

  • SHA256

    4b9a1ccfbdc4d4ce292e46b9a24f16b8ced0b8fa961b7328f542196518a677e7

  • SHA512

    6f5ecb9bb73f97dcb9892613aac66992dc70323f113d6e45384cfa906152c7ab909d92d616ac8daa861bd752cb1a899317c7c679a0cc88543012b179389cdad4

  Score

  3^/10

  discovery
  behavioral3behavioral4