Extracted

• • Target

    igfx.bin

  • Size

    411KB

  • MD5

    58af2905bb3afbf26a18d4dbff6af451

  • SHA1

    15b21c2753b658b90ae652d82dd2123daf5af305

  • SHA256

    c23c53452c3180e79ca639a79a2dc1ea8e3d8fbf4833e02e4ac02959dcfce486

  • SHA512

    1f2a73881b9950d2f2ce6ee57c75782fc30335a402c1d555fcd97082f7e43dc6d14fc584f5deb156d99421b036227748adecc9e42671e2baea382b68adcc9e79

  • SSDEEP

    6144:rweEDPVVGng08cErJGSovljhvXoFDkBTeI2+LJdSdMh4:o2tlgGxjhvqD43dSdi4

  Score

  10^/10

  formbookwh23discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    iwszswbfva.exe

  • Size

    7KB

  • MD5

    256173eb182e2853cbfa0590dfb0cb3a

  • SHA1

    c8eadb0d069644a491368497e91d737e4dc41754

  • SHA256

    15b35b8bd2d2e94f656e77a105e3ef99946b02c41d773d118ab0c64db578eb5d

  • SHA512

    22e88b1ed25e5f8391497255a8bdc7ea1aef876f3f3c9547e334436d8f250c8cc5c45c344b79c7009d15c9556235086190bc2a3bfb637cd3eaa67824cea78af2

  • SSDEEP

    96:B5AgpWlt+6vtR/c8CGzNyR5dj+5qB+STbjCXv+:wgUlXrCGud65nSfjCXv+

  Score

  10^/10

  formbookwh23discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral3behavioral4