Extracted

• • Target

    oo.bin

  • Size

    242KB

  • MD5

    f905085a630d00b01d514b663af54325

  • SHA1

    9355bfd5c0d1fe2636c24c12da6783d964a9562e

  • SHA256

    7d5ffe72101db06ec8ef98e2a4d698cb4a7a2c430210bef73b837fe856a5cc34

  • SHA512

    92dba6c93446543d4148d3f86eed4f1d5ae5e36f73fa99975e01c619e87f465575b44244f8a35dfcdfed45382ea8cc3355468dcfc5a5e7db496d45b16134f8f9

  • SSDEEP

    6144:HNeZm6BQtVdcgqeXfoq7fkrJGNevy73Ke787JhYKnusW0i:HNl6BreAq7+GNevyzKe7gYL/H

  Score

  10^/10

  formbooksh30discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    lycasyi.exe

  • Size

    4KB

  • MD5

    b4ae0759295f61f4a798dbac502dbb5d

  • SHA1

    754740cc5275e1f45d9e83ba8eaf0de46950d2b2

  • SHA256

    1e5e59864f9e0f0d90aafcd403b9b915b77883e57cbf5803116adfe292d81b2e

  • SHA512

    41486569ced8dc07eaa0693a1b42f3f597c1d3791745a29de62de1ef765e59e5006b0c6796f5ee387a75ee66497fc490620db3c2ef4f4e55476f2db2db228bef

  • SSDEEP

    96:B7SuWFY5Xj0e9Qb+MSiWEeqhJ604MYAq:h1WigBg/IH604MYA

  Score

  3^/10

  discovery
  behavioral3behavioral4