Extracted

• • Target

    15676e5199913f6f2263bbb3ac5ebf1aab24703083bbcd0934a7c09ac7c0abb0

  • Size

    244KB

  • MD5

    cccc6563d6ec2f4b31a72592795147ba

  • SHA1

    01bdcece3d320ba8e110b60d33cc95bd44bfdc21

  • SHA256

    15676e5199913f6f2263bbb3ac5ebf1aab24703083bbcd0934a7c09ac7c0abb0

  • SHA512

    eaebe3cf77a5ad43723704d8f195735e964dd476a210b4ad40b71159400af11567e3359bd9f0fd209dc5e7e656e2b0855a9756a4cdf4eb0c4aa180978c618e29

  • SSDEEP

    6144:HNeZmQNbl/ZVFHVsPFoHqjaufM0FvZCGu5aobQ9Imy4mw:HNlObl/ZHioDufM0Fkd5aD2mH5

  Score

  10^/10

  formbookr1e3discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    vyozh.exe

  • Size

    7KB

  • MD5

    cd213c05fe29d8ea2abebe71678b9828

  • SHA1

    ac00f24f1d70bfc40909d438c93362e53e954fd3

  • SHA256

    c3ef3d6c6f8b85e8d88363028d7058662fd32709836c707daf56e597570e3de9

  • SHA512

    457d821f5c2965ea5c3e1dc50fd44bf0e67e175f109efd5ae61fd4d8d123bbb75c856b545008e19a8c56af601999d56cada617dc368d4ae8f02e0099ed72e23b

  • SSDEEP

    96:WB9XnrVribqBM7qXOhgb0CIuDoSPmoyndxpJ:YnZlBpehgbFIuNPmoyn

  Score

  3^/10

  discovery
  behavioral3behavioral4