Extracted

• • Target

    sample.exe

  • Size

    459KB

  • MD5

    06a466881eb25fe18248221687af6ab3

  • SHA1

    17a3c06f08dc5610134292134baa2c4b122e3b98

  • SHA256

    f8e9e0ca14f6c6759716590b8880593dc9069d7666adc8ebbbb216e7175a1999

  • SHA512

    96b34326e9a8a72ace6c3b584408949f8424caf8d7bcb313a234c1452ee17c814db4277187abd1b15033064d73991bbd6db531b2ba8b0ef8f2d586398fbfbd95

  • SSDEEP

    6144:o9X0GbyZbMNeq+B8r2tOVdNOQ+ZyTZt3EMNe0835iP9cMf9A+jbudLGmvtpGsEYl:e00iaeq+8mMteFpiP9jpELGmvtYnYXOs

  Score

  10^/10

  formbookndcdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    $PLUGINSDIR/j6m19kru6wpzksw.dll

  • Size

    6KB

  • MD5

    fb719cbb8e619a0a53503d32410c099a

  • SHA1

    2d6a082ec6171fa00509758b25299278d1944657

  • SHA256

    1f1a183a52a36d09ce8611504ee629c7c2ef93ad1b09d32fbf2500441b41d0e6

  • SHA512

    68f7d338e41ffade872c8175c0dc62dd296dccd32f9d6308bb0a407c60032877bbd5bff4af7dacbcb3fa023f285ce55935defae750ff7e2108f6ff6f5ab22077

  • SSDEEP

    96:vGWc7CvrKoslKrKosdGCA+odjIMVWH7A3Fx:vGpNosZosjABd1WH

  Score

  10^/10

  formbookndcdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral3behavioral4