Extracted

• • Target

    022ce338093b066916440ca89bc619d13d104402ddbad665e19cb67d10ec2287

  • Size

    356KB

  • MD5

    c852d6edda8423d9307f0cb5ea10f750

  • SHA1

    a32331f7134fd005c57bb3d7b5d8ed4e9203bde3

  • SHA256

    022ce338093b066916440ca89bc619d13d104402ddbad665e19cb67d10ec2287

  • SHA512

    64aac84710e53d052490d8e1b703670e0bfc9d52d41a1742871ffe15ed327709bd135f3b7033bfa90a05dd6c67a1cb09785bc9bf86104319e795393988e3e08f

  • SSDEEP

    6144:jNeZnTKu1gRtv6cWG3Gy+crqhf8+M6JCoo2FC04rIZ6AxKRPLZ:jNHv6cx3G/Th0+M68oo2F4cgAQNZ

  Score

  10^/10

  formbookg28pdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    ftkyt.exe

  • Size

    6KB

  • MD5

    181fac370d823037dcad0d6bcc2cb09b

  • SHA1

    68f0ace3d28f067310cccf6bfe4295aefea80e10

  • SHA256

    1468812bd2ef069b5a184371088ecec787d572cc5439841e40f2185f293beaa7

  • SHA512

    6c73580f591a6b966ae57a8757aa0249cdcf37b8250d2a979bb391a7c8fea460346f8fd1badea2a4d240c46907fe2246dfc019abc72ee5c9afe73fa3388230b5

  • SSDEEP

    48:atkCjiL7MA9CpUGiPXXPuh5PtR+qCpUh0MovqHwI4IkPzI/iaIUIc7odlM7BXWjh:opeL7MAiiP4roM2V7acK7BHx

  Score

  10^/10

  formbookg28pdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral3behavioral4