Extracted

• • Target

    Order Nr U764D.exe

  • Size

    255KB

  • MD5

    04a169e7e5c9ea7a92a2ab3debf63f41

  • SHA1

    c1b35c61e8ee1382f7f83c182ccadf4bac6be2e8

  • SHA256

    afc6417a1f71fe5406d149c95b046b997a99421f92f4fb8398908b73675c2012

  • SHA512

    c5c932f02ae2f6ad6a67418a3302356fde44fa194eb9f6d02e6c150865fd9b87892187bf3e6aa379e9caea90892a8238b9ac3925e4e77444a2cfaa81dcf517fb

  • SSDEEP

    6144:mbE/HUbWRhd2L+uUgXCafRcIVqvP5xGKO1B3kqg4:mb/EhS33cIVqZAKUXp

  Score

  10^/10

  formbookmr06discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    nnmdtjq.exe

  • Size

    59KB

  • MD5

    8b5d0587ce1121389864bdcf9559d294

  • SHA1

    2b903d531834992e37fab920d7b000187a9833bc

  • SHA256

    f57122b7b5a7eff1b245080a876201adfe42eefa299d30dfc140f0427e139285

  • SHA512

    79e92611bab464b6c56f6fb7da20d688a6d0852f9515eb68065ddfca71a6d507f591fd8e6c7a7696b025f8d1341953b920c4abd6b170f34cc6c173fc50d72f6a

  • SSDEEP

    1536:2vtLu0ZssXg2J2m3K5n2ETMCZQsuyXn5QnQCT:2CsPEvMCi32nCnQCT

  Score

  3^/10

  discovery
  behavioral3behavioral4