Extracted

• • Target

    bb4c6c01b5e866d18d6d6559242b42e79ca9980cd9dfa0db7b4331395a6b5204

  • Size

    241KB

  • MD5

    cb7d4c1dc8b01bf82bb52937e5deeac4

  • SHA1

    458dba8f4563cd030afb237d69293208d71149ad

  • SHA256

    bb4c6c01b5e866d18d6d6559242b42e79ca9980cd9dfa0db7b4331395a6b5204

  • SHA512

    3565215740241e089565892b74108c0cd408433803d4fd435fc8f5ca878b23ced260732ffb59d617bdb91bf7429af630464bb6718469d35ffa10f2aaab8cb633

  • SSDEEP

    6144:HNeZmj7TSnqxNkECqXi2g8mKtIQgfCHaK2r1:HNljvbxNVCqXiJ8zIQ7aKE1

  Score

  10^/10

  formbooknk6ldiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    uyzzokhns.exe

  • Size

    5KB

  • MD5

    78bbf1cff4144ac88fb2fa7a53196d91

  • SHA1

    c7daf19ac7143a2e02173d03223a9bcbcb6e44b9

  • SHA256

    2a46132c92ba642674b00ea5df006856498d67b30f64ca5c74061303b056ec0f

  • SHA512

    5eb68cdaaeec7990b1358853a7a2c2b01ff81c24d1cdf2e931a20475bcb1957ac4a42f723e51b2c1a51bf837d0af784d0681027634d6260d04f400d618e9a4a6

  • SSDEEP

    96:BlfOtjP6eAaHh5pZxTqzBS1nsnQXzGbSu+ynOVR:b/3aB539qlS1sQi2uZE

  Score

  3^/10

  discovery
  behavioral3behavioral4