Extracted

• • Target

    1f0dfaeee8860dd10d592b0632dc1ef8c2fa1bc9681e0f9e29ed632f2260abec

  • Size

    315KB

  • MD5

    5b9271a33d0ac9c8b59bb27cef2b3834

  • SHA1

    98f16671e6b09b68721a73bba9c5a15e7c4ee664

  • SHA256

    1f0dfaeee8860dd10d592b0632dc1ef8c2fa1bc9681e0f9e29ed632f2260abec

  • SHA512

    b4d7e76b92b641ec2ae6702e5c955ea60ff8b7a5b77e1456fea5118398343c3501dd1f6b1b1e82d60ee5834c583cf22d74ff0b2455e2939e6e88f99562bfb2b6

  • SSDEEP

    3072:J1NjcVVnLpPuGDFsb5Rchf8BS6YbMZlfBtwTrSJxbVrWLK9omNYFkPthSPhI/cag:zNeZwbcu2mYmJxbnokteYwHqyTV

  Score

  10^/10

  formbooke0l9discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    wdxsx.exe

  • Size

    4KB

  • MD5

    c23f252a4352c30c3473e3fbbdff84f0

  • SHA1

    d7240c2f65d1509e51c8461d835a1b14e167ad4f

  • SHA256

    6bc4f989450cc6a3d1e220371fc64029bfac461429b035b8db90ae56af7dae8f

  • SHA512

    87ef7be0450bd6b40d1d63fdcb66448b8aee04ec9627dc2aacde848ea83e042763d8ce8b1e94547a00b316ce29447c5a036ca92e3baf5315088cdc473edecbd1

  Score

  3^/10

  discovery
  behavioral3behavioral4