Extracted

• • Target

    G-77904DOC.bin

  • Size

    300KB

  • MD5

    e133504aa7c92bcc8b358abfa4c36a20

  • SHA1

    68a3dc52c35115003d74c224dfc3f9e95bd00c04

  • SHA256

    58a064152959df9f0b10cb78b8cdcda6eae112619a7239ddc0c18547e7e3a598

  • SHA512

    98b75db2b869e910565321e829689366be7f319cf6f3aaaac65d06a36b6985cbdec0e16261bfeb0f93b8a48d5b1c707ef28deb84430ccb738dff0699a3a5fd60

  • SSDEEP

    6144:rGiwlK7jQRnqGFYtTJJr3+WZmHXH0CNK0d2Rr+oGJyRt1sy2:QcQxYtTbr1Z4/XZMwy2

  Score

  10^/10

  formbookbs11discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    gavvjlio.exe

  • Size

    107KB

  • MD5

    4f1abaead61fe7411fc7c6ee5082d665

  • SHA1

    b4ad83dea14c06e0aa2c2ca582b52a527ec01d77

  • SHA256

    e6b54e61fb080c3f6efb98d3ac8d182ad859fee863cc43478c99d3660bec6bd5

  • SHA512

    e045f7094df1552776c1542edef3066663fcbfcf7dcd9bc871de273ce087c898aee583f603f34532d94e8ee22f86b550c736ab9232f72c2966cd62613dc5baab

  • SSDEEP

    3072:SqQXWDue89k9zr6i8vHI0Qy8Va7bcWbePB:SqQtaprkv+yb7bH6

  Score

  3^/10

  discovery
  behavioral3behavioral4