Extracted

• • Target

    jeetss456352.exe

  • Size

    214KB

  • MD5

    dafccfe6911e74fd47cf1461e3580ed1

  • SHA1

    b84783ab8d2c044c9a4cf2765831fd776f220c64

  • SHA256

    8d203db46294994fba62e63ddaf99b53c5b8abf2e407f7ee516f5df1d44cc1af

  • SHA512

    4093bbdb3f57b7dff3d6f5e699698c303c9a79cb74bba23778241ea3b8bd12e380ab034065a3f1ff306638346fce69dc8dbc4461983b3cc6c6a95e8a2386c4ab

  • SSDEEP

    3072:qUJoFfWzzl+cSM9BPmuGky8vtGAxeVbzb0kA5nyq956rosqcqXMZdQLfl7Z2JwQo:qweEp9Nmj84AuTqNvGr3qbXrLX2CO4T

  Score

  10^/10

  formbookje14discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    isktuabvmv.exe

  • Size

    6KB

  • MD5

    4debf3d4be3833c81372eab33bcc8f99

  • SHA1

    3c01f72309070804bda00f0545ba92dc32635d36

  • SHA256

    a5a20c3c5c6a4882e770da52b1a8d498b39fdbf549bffa6b594566d7f26c99a5

  • SHA512

    1418bc4717718a6f2fbbf738cde04509b5a8dcefe430b9be0dde97551248551f136e5d7649d8ef415ce67507cbb2c4c7b3ac29824f6abb611a4f658f46a74451

  • SSDEEP

    96:BLdFF7rmlmOlmIYeFljSq1cD2V3pqjoZxRaLKC:xdFF7r7DIYejjSwqjoZXSK

  Score

  10^/10

  formbookje14discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral3behavioral4