Extracted

• • Target

    jetss6754309.exe

  • Size

    213KB

  • MD5

    ec45a9ff0d37e2c4c4b22f752faa737b

  • SHA1

    9cb38d97822f17be47da16570a996bce4424aa9f

  • SHA256

    d93367d117ae7f3d7a13e3958554500d54182cd51c6426448f1d248d732a0484

  • SHA512

    2e7c7305a121ed39b630fdb58040ee94bb3eb1ab0558ed26b40109018272f71fc00b27358d0a16308405548af4051052661e0a5c44610c20c86546bb673cce5a

  • SSDEEP

    6144:qweEpk2xjPucCaf8VXcj8JqooMJZgEUpW:bbx750t48JBZT0W

  Score

  10^/10

  formbookje14discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    quhthbz.exe

  • Size

    5KB

  • MD5

    76d62afbd866bb7c381a22dc2996bd05

  • SHA1

    912911b232c8d942231d3935d0e45badb7006e75

  • SHA256

    20aab90003cd0daf3e9f0cf54d2ab45ff981a72cfe2bdd73e962b9d5e3af7c43

  • SHA512

    1ddc33c8e47886e1a7abf878011a0d8a4f33655a9a3ce5cfdc7c51a6aef46acda8bd22d9ea1b2572660e9d37dc3af9ce09c0cd11cd62d963c8bf0bc39dc876e6

  • SSDEEP

    48:vpgJ0Gfhxk9RncozPLOFYTLOFY1MVMkQt8+l6XU6vLUYmRarMy:BZzsozPSFaSFmjt8o6XU6TUVRar

  Score

  10^/10

  formbookje14discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral3behavioral4