Extracted

• • Target

    73a9e0eec95e10855d7abd84c27208f881944a4603ab6074bc95f060d45d52d7

  • Size

    679KB

  • MD5

    24c3775cb554f7928eeee4865b1cdd4d

  • SHA1

    787121f0b5b9f882261571c88be20b960f05daf2

  • SHA256

    73a9e0eec95e10855d7abd84c27208f881944a4603ab6074bc95f060d45d52d7

  • SHA512

    c6b096a4f5753004f86ae964558832cd188b7e5c1cb605e4085f352a9fb664a05165e3b659ce18d8da8769d16786cd60236cb4fb34d46c988815149ee768e1ec

  • SSDEEP

    6144:w8LxBnhTon2UCOG1PkOQbhs00alDSmwv7NffZDReiA15LjR:9oZCOurQsxmOVeiAJ

  Score

  10^/10

  formbookct6sdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    $PLUGINSDIR/jisuens.dll

  • Size

    138KB

  • MD5

    7d2cebbfe1ee8d400a3832682592601d

  • SHA1

    1d80d991fb2925812e5af008d8b41a9c7195a528

  • SHA256

    fc7fc9a9e53d9485bbb46619779ff8d205e187755ec50a265414a2608c2f7a87

  • SHA512

    1456a13256ae9117ae31c0e9519ac0b917319c50e8e491b3bfe5dbd3b4864b585e1e603065f2e33cf188859cab0fcf47a73dcee96d16aa397c6857c8dd6946cc

  • SSDEEP

    1536:xJUCRI+m36N80P7WFyM4H5zgkIydOk4OylFcFb7eMYcobUfsr5dSKoabxNUdC6:Z54SZg4pm1zemLHxydC

  Score

  3^/10

  discovery
  behavioral3behavioral4