Extracted

• • Target

    Commander une image.exe

  • Size

    419KB

  • MD5

    f5a09e2bec2448ffe0f1121af91411ab

  • SHA1

    b81e12b89a1d72c90bfe6b5fe95b4b053e0207e6

  • SHA256

    90bbdf4e97b2f992340311300e29ce5dd0e8112c6dc681e3354855097eb83ad2

  • SHA512

    927216a2a0e9bc9141a0e9d32164b5e85708902fa8d22fe328d4ccecaf7f5bc562c875c330e3fedab8e8ee40d4612bd2d1ad57df2daeb83c0d856ed8bbefbfb4

  • SSDEEP

    6144:yGid26cy+QMFCjTOkpNEVMDGFYSM7QABzKNKVQ7i4iOE1u9fUy+z4Cz5qyj:ZzyuCnjDWMxZ7QUup5iO+u9X+z42ME

  Score

  10^/10

  formbookdn7rdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    $PLUGINSDIR/xkaja.dll

  • Size

    34KB

  • MD5

    e5ff8d9cb45aeff5b05a5a1e54336585

  • SHA1

    a2d037bd24fc22f65ab3816ed135f301bd96f051

  • SHA256

    54df2592ba748fedb122fc6c4c18172bec40568fc057b1832cdadc808ce22dcc

  • SHA512

    e2a0aa236957ca5823bcc9f091a263970621715f85f89bfb78adc5333cafe912db1e51bf00e8e592f08089e91cfe62a71070745f5ed131c1c0c025211c667582

  • SSDEEP

    768:LIF+gXlS8F3QmLWUL3CwTm57emto2Oslp:LBgXJgmLWaFOemrOy

  Score

  10^/10

  formbookdn7rdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral3behavioral4