Extracted

• • Target

    S12GF803.exe

  • Size

    276KB

  • MD5

    73d7525cc16a70fdd326f3cee8928a80

  • SHA1

    2354ed7b61f9764d318088aca0c92884e408aa28

  • SHA256

    4518329e81a1a2e8a9bebd6dc7797ec5cc93723075409cd44e89d572da46eab4

  • SHA512

    40722cda09838d1f5e0ddde6dbbde9111149bb59c02b21af63cf1626fa2cb59a7126d018ceccaff80295bbc4f0f8e84f065104f971a9b587112a454a653afcef

  • SSDEEP

    6144:/wNTMFkC+gUJIqC7uITtV66zZ6zNpTbwnxR7PUj:ZFk5k7xlAbwnAj

  Score

  10^/10

  formbooksl12discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    xsdzemml.exe

  • Size

    55KB

  • MD5

    e2aa91fb3599cb7cbbd1cb3d5e4c3063

  • SHA1

    f4278c4f6e1f3358b1ea4748aa2c9401488b6fb7

  • SHA256

    2e61c28dea3a0dcde21b06fba573bac629a6cc2fb464bde2f332f3e8c3ba62df

  • SHA512

    f5f91140dbeaf73a724bca50914a13bb4bd180c0a6b4ccc87f7abd34cea94bd0f16d2d601ec8e6fde5d414f24e8078622f2f203d135469213d524a0f4b632ce3

  • SSDEEP

    1536:Jl/q6Jo2jwim79h5adPF329aJih1IjzGx5SsR1q2Ym0PPDYlHCX:nq6JBjmpjadPjih1IjzmFrYdwC

  Score

  10^/10

  formbooksl12discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral3behavioral4