Extracted

• • Target

    invoice.exe

  • Size

    255KB

  • MD5

    370325f2e5f6a85aaf28087cb739e313

  • SHA1

    617235f277614da1325dff53930e51bc45ac11df

  • SHA256

    8692e6fd0eda4246c038c8671a633ee05b8a76b46bd024511c66020ba69e3f4f

  • SHA512

    88cc1bc807eaefa33b803bc14ecf85078b1242596e504fa39be60fdcd65b94006beeb77fb7d0595e019f6a2253310d51fee9b8c27a45f12a7b880a0dba05c128

  • SSDEEP

    6144:mbE/HUbWkN7a34BeKtzRVzSnGHWu7xS51LI8Ywh:mb/j7a34oK5rzMuxVSh

  Score

  10^/10

  formbookmn21discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    bjzfttovhy.exe

  • Size

    59KB

  • MD5

    8aaf366f0347501bad46a2593664c9fa

  • SHA1

    8f80b099bc2eeee883fe6f3afb0b295cc9c10ec6

  • SHA256

    266853551f6890103f71206b085307f1174b185f55b6b87aa3a3d3f189a1463f

  • SHA512

    d0f4744479cff0f8f25fa312d502629041599aa97801a4ba1085e1cd4b12329d47f91fcfaa638c04274377534114934c2b94e07188355464498b08ed7f94a6a0

  • SSDEEP

    1536:SvtLu0ZssXg2J2m3K5n2ETMCZQsuyXn5QnQCO:SCsPEvMCi32nCnQCO

  Score

  10^/10

  formbookmn21discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral3behavioral4