Extracted

• • Target

    a9443eaa7d2d6dcb3c7fc77200c340bdfb7acba3f77aecbb5d07c0f50b5e1ee0

  • Size

    248KB

  • MD5

    60268126a7a5c0a03358e7acb155753d

  • SHA1

    6aa7f8495a0498d437c0a1255d31e1f85a4045c6

  • SHA256

    a9443eaa7d2d6dcb3c7fc77200c340bdfb7acba3f77aecbb5d07c0f50b5e1ee0

  • SHA512

    51c376341b15a3355d5e9b427b15d6552a332d2b5fc5934e5705db55d1106b77898396291c4b56ca05c3e00e0479bcda61a6dd354e19d855717fa22a3cc56979

  • SSDEEP

    6144:HNeZmabIvllTu8EWvbk9Xi7asfYqGcWsL6Rq8:HNla0vllTuWjSiWaWsLiq8

  Score

  10^/10

  formbooksn31discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    kruxx.exe

  • Size

    78KB

  • MD5

    72cc5689ff61af5b6ce2ad9ab8e87695

  • SHA1

    b30d786ff2e5ad9e916f188ecb463392e8ba75f6

  • SHA256

    16e225b10cd5bc64956c75ac0fa201a37127badec00a33d9b4d5ad0b76e26198

  • SHA512

    b3974b38475f39def30d4f9cadd4e6c3387f4296a75352bd88cc1f98f1adf9959eec06b1bf9d9f3dc4c0c14baf758ba9fcf8705ce3256a6487afb50afa26bf94

  • SSDEEP

    1536:fvjZ5WkZHDJlxTM/e3YngleeccAxSpsWjcd6E//t:F5NbPY/IxAQWf/

  Score

  3^/10

  discovery
  behavioral3behavioral4