Extracted

• • Target

    rock455321.exe

  • Size

    333KB

  • MD5

    8684d70db70df0b6b307ea7d7cdaf7db

  • SHA1

    6bf38ec565189fd303275b7bc3c4770396c29f29

  • SHA256

    0479e653d2603f09b71afd0f2a7388c3af722643a49ac94541116dd6add60b2c

  • SHA512

    8bf5649fdf5ee3623f66a4cd46a001e07f77ef4e2b4232159cadf3d8c63e0bdec216c62219597b909f07d357d75bd994147c212f365389169a077b955550203a

  • SSDEEP

    6144:TxDb5vv/1m3QxOve1lmR4BEfrv2SoFJli1S1tXiplUXP0a9:03OO+YRYETv2SsDvvSpmx9

  Score

  10^/10

  formbookr1e3discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    wiwve.exe

  • Size

    222KB

  • MD5

    c8da642b7d1d6af209da1815cfabb8ef

  • SHA1

    abf77fa46cd99db90601f2b1b9d351bca76d1fcb

  • SHA256

    5d1e158dc8e0168cdf718ca396a9cf158da04155266190fdc461db3b4ff91daf

  • SHA512

    5d6cafb172568f2542f4c09bffc1608245436a5a7698131c37c9ae8175477709390516197e6302cb036cf39a0d7c456e1236604581b4e468bcf06e90ceff8a97

  • SSDEEP

    3072:n2mJamjK63BsvtPN668Okm8Q1vwVgTAHO2mR8pp7uVoFtkbCPK:nU63BsvtPcBMvhUnmR8pM

  Score

  3^/10

  discovery
  behavioral3behavioral4