Extracted

• • Target

    INCENTIVE.exe

  • Size

    435KB

  • MD5

    a8dd9be8f05730b0b3da0aa0524d4041

  • SHA1

    585ce6f6c047ae07daf2754cdd9f011f8bb8343b

  • SHA256

    d30c25033a8cd080bc76463ad1ef591f61b66b5bf36aae6557d9664714908614

  • SHA512

    7a584d294a8702f03ee91f6047c08a9e1ed56742f1a1d19ff9a99778ea5b1270b44d67cf0450fd5e98b75df7d47208e6259efec3c486dfe39e1d5ccd62713dc1

  • SSDEEP

    12288:UbLr/1vBE8A8gJ+7rWMtE2bbOu8Nsw+Qw7n/C8c:UTNRWw77tE23Ol+n/C8c

  Score

  10^/10

  formbookn62sdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    $PLUGINSDIR/wslelgm.dll

  • Size

    303KB

  • MD5

    7c38758347c69368b8bdff2f7a5ba99c

  • SHA1

    70c318991c2515844ecc96714f5ad777d2e7e6a7

  • SHA256

    fcb8bd3b27beffa5255fbc8b485b038b321043eecd77fc21cf4798446c21a971

  • SHA512

    5d04876c8b1dd9a2d691d832471ad650ac85b95503c02aacde848f3b4f6f9f99c861b5a5f8e3e401145e6bbd78f59b8dddc8f24207a52d57afa3efe8940ecdac

  • SSDEEP

    6144:w7avUpJXmVeuuxx2eiXm1C2kNWfHZKKzeXxNAYlkhAV4D:SpJ2Auu72eGEC2FvZK4UbdOhbD

  Score

  3^/10

  discovery
  behavioral3behavioral4