Extracted

• • Target

    gecikmis bakiye.exe

  • Size

    213KB

  • MD5

    2374db6853cf78b15f31892c43180857

  • SHA1

    5eddc78b5d56fdac3e42af18cf1b5cada38368f5

  • SHA256

    92c5014b109cf6b18dbd0466a0b2ce20bb3900d667747c069a367d98651f419a

  • SHA512

    021b1f2d467729ee479f25c6be7a5417ecf889ac86d3d340c9cb5fbb741278a6cb3d30921b18ed2d359e16630acfb22abe26240f94f7214d1e3b1d1347d3d24e

  • SSDEEP

    6144:HNeZmDuFbUmUCYmtm8X9UiZ5KQzgg4pWI:HNlD4beF4ZzZ5tqH

  Score

  10^/10

  formbookd23ndiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    jnkbb.exe

  • Size

    4KB

  • MD5

    513ec601b4cd4e5b3453805337b08116

  • SHA1

    1494f6490d448ec0d5a16817b4e02b9c093f93c2

  • SHA256

    ca770e8d07d951e267ad1a84d247a0ca50376b92f0f022bfb8920c620ea71a06

  • SHA512

    3b367b6af540b150a0b8f833379c3a9328d0a58342affd4b56afa66fabbb608146bf67e8d72748ee9b56bc39caf256e0a4716934a57bf96376905e403da75f1f

  • SSDEEP

    48:vpg4EM5rlz1FZHLnd9TybIyb45oAPHfwwfNkzQ7t4pvLLmqVbYmR:BFZF7ybIyb45oAgwf+zQ545H1FVR

  Score

  3^/10

  discovery
  behavioral3behavioral4