Extracted

• • Target

    19.10.2022-21.10.2022 Ekstre.exe

  • Size

    254KB

  • MD5

    acb287f5d33a3bec62620ef511cd3e6a

  • SHA1

    975cec902942585321f353e27d41f7dc4bf5b1f5

  • SHA256

    622fcde32b89e9dce35b3513aec205891045470cb1111cf1c88f939cd10065fb

  • SHA512

    8041d5d84098881f1051b66322726ef79718334b766e062b139ed11cfdd622c1b498e110954cd56af74bdefda40b676afb496f4b2c3264dc44384fb64221d23e

  • SSDEEP

    6144:mbE/HUbHvDIgYx2yMlMdhpE63mj1CRK/dt1ImTXfGaW9:mb/HMylMdhnWj1C/WM9

  Score

  10^/10

  formbookoy10discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    oujsjnpvzn.exe

  • Size

    58KB

  • MD5

    a53bf35dd3f2a0ece1babdf99d98ddb7

  • SHA1

    866e4d1315486d4f792e03449def24bf48fba2f5

  • SHA256

    f27f1c46335ed31550b8fd38781e85fd498edaf77ffc7fdea7b32f044c5cc26d

  • SHA512

    f0ea778f032871260b891116e880c1814a7eeb512b4f649c8a3d355109aed9858128477a8d2c1d12dac5ace5be74879dfd590b9959c309ce67d1879828f679f2

  • SSDEEP

    1536:s1ep1tOKxVeU01JVlG9NSstFdGxveJh7LY0GRRxfW:s10tOKinJlwN2ypGR/fW

  Score

  10^/10

  formbookoy10discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral3behavioral4