Extracted

• • Target

    PO#1120098.exe

  • Size

    404KB

  • MD5

    87d4ee2c81b5fae355cad8d154907d7b

  • SHA1

    cb8fc5cfdf9b5f9202360f51f9cd1663177bb719

  • SHA256

    3fe13e6186755a24b331072e722fd65a60f1c40dea337e4f4e53640f083d26b3

  • SHA512

    9c43ec32b1dbb877eb8e51e0a6ab6135e9500d17c17bdaabc3390e0eb6218f66728d6ca40775252f38cedaad3f3555ec0b55afe328dbdf481e2a2d836ece338b

  • SSDEEP

    6144:yGiNSjUEBnA+hiVs8786nkn9eyOZxcyd5jJLMLtO1b3wvG:z1Al17899Gxc+pJLJ

  Score

  10^/10

  formbookf1d4discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    xyqsqa.exe

  • Size

    4KB

  • MD5

    21703a2b69551aa3ce5465ae96181491

  • SHA1

    6cb32673f3bf2eac1e9d6f7f21465d9b598b05ec

  • SHA256

    094e08dcd36e68eff615e0e1aa4aa9d0525d5200b212af4ff89ff3b0c5dafdd4

  • SHA512

    edece5ae3dad4d37192bae6d6bec301ce1e7faef181a93218a193ecd3e2e2c89fe2103ff4bd3f8a4f4b0c677b39db36d91586e981fb75826a5558d98f15cfc2e

  Score

  3^/10

  discovery
  behavioral3behavioral4