Extracted

• • Target

    SURRENDERED BL-LL2517277SIN14_PDF.exe

  • Size

    301KB

  • MD5

    cb55b1c8b112717e074a933736d752ad

  • SHA1

    7cd50bef2260873a9132fec9fd0b5a74917c78ae

  • SHA256

    f67e87585159ebb0d655eb17852a6c506e238d10091f3e7c9c3952e1d7c5df43

  • SHA512

    ad381a9898849b644efb4469563e8e295b3f87fe98c1f57c8395696c161aa915b129a8ff1c4136f3be00286470a23f4b492a5a5e488fa739d2d3c850865463e9

  • SSDEEP

    3072:rS17XJiDxmJJtX+WI+uO2u6TszZsyCAe1lw6na8xm/gDO3std4h9v4/0nrgoaKM8:rGiO+p+uOx6TKsTFaWM97xxAlKUPYH

  Score

  10^/10

  formbookb62ndiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    $PLUGINSDIR/jrtnw.dll

  • Size

    119KB

  • MD5

    053e283c36f91d1f1537e5e156da3853

  • SHA1

    502bd093ad89b93398d0ba046cd0f10f4be37069

  • SHA256

    dd06f297b9966525c5b73e7bb63db9f02e3c9e7eab89c2980a292f35a7afeaf7

  • SHA512

    27731297ce8ce34360b7aa19cfa3526453794b7475875f4312ed9289309e77e16ff48428a793359986662130c0c6dca33e174cc6c74c075666369b4b5f963513

  • SSDEEP

    1536:L6Qe5/VlX7GSkbMFOZKY9uphgUARVGggsu00zyMAC9rupUZrXiKoyc50IDLmUleB:ALusOkY9uHUR8gurT9RrSCIXRlCiwJ

  Score

  3^/10

  discovery
  behavioral3behavioral4