Extracted

• • Target

    PROFORMA INVOICE.bin

  • Size

    638KB

  • MD5

    a3b8d59430deef4d59ec0d47a60af449

  • SHA1

    4cb4bef74a68cb9a55c8eed369a7beea317e3840

  • SHA256

    1339a93d8ca9b03d1b55ce0d283da6d320bf04fc515a8259597c635901c821d0

  • SHA512

    402f97692a312b8a70ea22e585f13c1c81336a1a7845202f2368622c1a1422b25f779778227f3ab4ddcd250cd496821486918a8e73f6d527c4262d827fc11474

  • SSDEEP

    6144:uGi+jGL0og4dDiXYOg8XQ5iiRHTjO0gBzxRmpwCxkZ6W6q/Ba:A1JiXXngQEHTxgBzxmwckZ67q/Y

  Score

  10^/10

  formbooka6hjdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    $PLUGINSDIR/dvxpshe.dll

  • Size

    66KB

  • MD5

    45f315f24046abc7cbe07a0f08a500b4

  • SHA1

    5fcbdb3743ac2497181bd800622b98033e0232bd

  • SHA256

    231d2605fc4ba8b8abed10831692542931ad6e7f647225376723cf385695f1bf

  • SHA512

    a2df0a846c508318eb0eee02921c7f345aaaed5fcc25bee179eb092586c145b8348fb232a22a349fe2bcfa9166778c5812062ce89782d7f8fb2de56497f10a31

  • SSDEEP

    768:6PTL7gePJuhk15raztjcwg0Jm8jYMLZdSDoeA/BUi0O281TbUfszDD3VlcwLVj:6bL7geRubzt/gyj1LZqOvRbUfsbrTR

  Score

  10^/10

  formbooka6hjdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral3behavioral4