Extracted

• • Target

    7084_00_WPG_20211716.exe

  • Size

    630KB

  • MD5

    c438a205d0a5c285ac98f558ee669dfc

  • SHA1

    1c11cdda027a795b929d4876d04cc2c27c89219b

  • SHA256

    e04c2819db3610dc0498ae022644d1b2ab06927cc4fadf23b200af70b551d6d2

  • SHA512

    692c32154133d1682e756379b83440c74a78e8bfb00ec6f3b342d1eb3cd74c5e511950ba5342ce08f5d5a5727c6ba86fd47a66c27cefa54ab2f93a8ce5a2925c

  • SSDEEP

    12288:KUNPWZCOO2120vc6r9o/gvb5zWeLlor+d7UuB45iEbgXP:KUNap7E6poIvdWeh5j45iP

  Score

  10^/10

  formbookch24discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    $PLUGINSDIR/nibn.dll

  • Size

    355KB

  • MD5

    2903025272487bdafaac262605b15219

  • SHA1

    c9175643f7ee479e45cb07a475d6ed2570e5fd3e

  • SHA256

    729a24f2784fd7f9f02f9696e692f629370a150a1ed5e47b74efa2b0b5bafd72

  • SHA512

    d9d0826386d3ce95f94269754a65b2bb37571b895e67df7a9aa426e46965cf393418abf030ba6a1b9e3de020609d598f821aac7c150e339f12cfc112ee1d4bd3

  • SSDEEP

    6144:5aABsU0Ln/bSe0pcKSdl+l+Ty129bbPUx9Uxu0keeFhkP:sABt0L/bSnpSdlBi29b09Uxuhre

  Score

  3^/10

  discovery
  behavioral3behavioral4