Extracted

• • Target

    AT0001-Purchase order.bin

  • Size

    316KB

  • MD5

    a98ae50f4a149db303f4e345c900c9f1

  • SHA1

    5fbda81750c932bf64d2a57d773867679953bc90

  • SHA256

    d93009185b1d089f922fbfc67ab4097a178f63b5f18f538a88b24a869ab70c12

  • SHA512

    45aa93cc3031e44b5d2478d918b6004932a3bbd51b9930cc47124aa67f3e0a1a1a830d170e0f959cf63423cb99b66eba2e3188047a579d2cd155dc96c103dbf6

  • SSDEEP

    6144:kNeZOWWFI0Dp6DHuZlsljfVaR9gnrBfp3lT:kN5WWFI0SHzlj3nr9pVT

  Score

  10^/10

  formbookgd08discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    xhxsojqn.exe

  • Size

    4KB

  • MD5

    cfb2774909a615a38d13977af09c6885

  • SHA1

    53f7c365ec213d93da2d73250d706afd824c76d5

  • SHA256

    8506e5d45c6f8e51e89c0e8e188f4bb0b5c3eb1c98a0d3dc7085087156382508

  • SHA512

    da94a4ea2d0dcb75e45f9d7a36f413607ed521946539b6178840893c7ff066a259a8e5ed137ab4513473499776f251695f0180d7d9cb1656ba4f57c921e22b9d

  Score

  3^/10

  discovery
  behavioral3behavioral4