Extracted

• • Target

    c657108efc3f78a3052d15e5f2e8593181566f45c2c3e3316437bf7d6632095c

  • Size

    434KB

  • MD5

    f6666d2dc66bf27af205c487c6a017d5

  • SHA1

    639246ec825c9353bb22842de1b9411e53be2f35

  • SHA256

    c657108efc3f78a3052d15e5f2e8593181566f45c2c3e3316437bf7d6632095c

  • SHA512

    72bef879fb5e924078f7af3808f026ce587af4d0abdb60a84696eeb147c79a4b4d6cdfbb16286657a80ae42f9ffdac78f0d61aa869cfa2c9809795504085af4c

  • SSDEEP

    6144:qGi4U177myi8hHrVAn7PuzIuctvYWKJFa/ft3a7CfzeE3Nw:R87c8xVy7GzxugPJM/ftECby

  Score

  10^/10

  formbooks1m4discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    xzzepj.exe

  • Size

    56KB

  • MD5

    0a4cb859a673483a1f5612365975a485

  • SHA1

    24ae60a57e5a374944c30351d898b5c1fe508c38

  • SHA256

    ab0d73765ac2310f6401074f9a7d16fb30e32c2b188cb47697d9e0fe0d3ae16c

  • SHA512

    9756bc2676adc754502f9d290242d71f62ee456ba1420735f78fc514783e26bb97acba1ba74a7921930faba2c55551c14b62b34b54658ea8da4f02e60ab08563

  • SSDEEP

    1536:fQgl7RYVV2MG7wSRuNpGkJwG5hrqcZljqQHEgL7ZT:fQglN5jEDDhWc9rjX

  Score

  3^/10

  discovery
  behavioral3behavioral4