Extracted

• • Target

    ScanPMT.exe

  • Size

    593KB

  • MD5

    455769c893c56ea88021417a63a0f9ad

  • SHA1

    0f0bcec8e151f30db07620da3573e6202bf6bb08

  • SHA256

    77901588d513788e7bba467897bd688367197dfe4bdace3bf762ff1de24db3a3

  • SHA512

    6098243876ef9f960d60f0e6b2c6e5ff0e848fd89f532f67b62b69cb487e44947a1ac1feb9d84df6847f13344afa1c892e67bc89e4916896f48a8f06191fd78c

  • SSDEEP

    12288:/5QkJecOuNPel0EI+TCV8se7DEs5CSt20MXmMU4pJym:zQcOuhex+A7DEEvt20M2f2Im

  Score

  10^/10

  formbookb3n1discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    $PLUGINSDIR/ohbpyoj.dll

  • Size

    339KB

  • MD5

    f4d79c46904300d09db5984132baf59c

  • SHA1

    0d7f273647a202126ce60d81c4fcccd8d3481231

  • SHA256

    d0caae610e4e945c5bbd52613d7ef2eeb9aa9fd58f731dae92da9a0feb617b0c

  • SHA512

    4276b9abd57ab926e326fb1939fb37ceef2219cb1e2bc5f3ea7091b3d2ea9600a2e18ad1eeb79d568a77294803cbab66ac8d4fd5413b200dbdbe8138114485ed

  • SSDEEP

    6144:T7fbo4suTTOpTMRsgfLjdd1MtItAmocJ1Ljl9NGkN4pPY:T/o4sJp70xdCqtAuBzNGi4pP

  Score

  3^/10

  discovery
  behavioral3behavioral4