Extracted

• • Target

    19abdec12c4b7f3fd7a1912867b03527e8b93548cacf14c0a9b3bec61989a573

  • Size

    294KB

  • MD5

    1232d8adee3eacc8a6d6757cb2b2850d

  • SHA1

    b55e8f7f49e2db9c3279fe71214cf54a4e81c69f

  • SHA256

    19abdec12c4b7f3fd7a1912867b03527e8b93548cacf14c0a9b3bec61989a573

  • SHA512

    fc0808dc711eb04ebc204cf9e9e3b28cd583fe91037698152a4dca8b5be62d1443175570f444c546a737ff2510007f65e217de707d94010d13d76d2e371896ee

  • SSDEEP

    6144:owpg4eB/W8sfYIUAXvjBkPloYw/C/Yz2K1A3pDlzE3iMMknvxw:Vg4eB+8p1CvValoYwak2KS3tlQz7nS

  Score

  10^/10

  formbookg09ediscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    cbpklgiv.exe

  • Size

    121KB

  • MD5

    d04a14c986145807ea9fe37a7126d675

  • SHA1

    28dee42f5cec69d0117156d96231887a4aa7d8a7

  • SHA256

    6c019f60af2c9281a9c17b27a336749283767ac9229c9d3bbcd8ccedc290b417

  • SHA512

    df9f899629bc4c32704f19cea834c62da6ac6bb1043ac801069d3418f4a14ca28175ace78da4bb5ea4034509891b336db9d519d8370b388148461453a20ca526

  • SSDEEP

    1536:rg1+KVQ8rIrQgdQqWzEEXficU+H0se/COAMMjpLb5EBiE6mV7MFi/wkp9c8DjsWj:UcvvAic0rIVyBiET/bAQ7

  Score

  3^/10

  discovery
  behavioral3behavioral4