Extracted

• • Target

    5e642e91516b72121ba30456c103234eaad7895a69929a3b35f0f540a6b8c6c5

  • Size

    241KB

  • MD5

    671f622caaaad9137a2eb0663ca0ec70

  • SHA1

    f93256448a08355dccb1f3348e435f997a8a2319

  • SHA256

    5e642e91516b72121ba30456c103234eaad7895a69929a3b35f0f540a6b8c6c5

  • SHA512

    46d9dcd869d919e03c032ea152900f8463298a90cbf598b31c6eb2e6a60c006fd03a2e5114402e69abba84da1dda724226b207a86380746403f315302f394977

  • SSDEEP

    6144:rGix6Ah4a/KCdg5GfMF5PPTw1hTbqWDgCKz+/cIGdwxWa:N6S4a/5dxww1hCWDjCyG+n

  Score

  10^/10

  formbookse29discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    lsyvak.exe

  • Size

    5KB

  • MD5

    665da445aa2fbecbaa1750cac3a263a4

  • SHA1

    48b6e12c571d12c18f44516f74e0548f8289ade2

  • SHA256

    1a41e1aec75c713684245dc5235fd61e70d221d01b44a1dd9dc065578bd21670

  • SHA512

    722e11f030555c065124034f52d2ce1cf078996b8493d870caa67ff99d9a723fa4a7c9d0bdc6dbd026a38522fb4aefbcf6ec35ffc9bcd013ab357454eefc2169

  • SSDEEP

    48:SIL+El97M8HDda9lnhttxQaMYV7lRkQ2PBTkjfMURuqSPJnhRhR:Ham3HDdWYBE9xShR

  Score

  3^/10

  discovery
  behavioral3behavioral4