Extracted

• • Target

    SKM_C224e2104221317034443434434342244347.exe

  • Size

    254KB

  • MD5

    b312e3f54db0e9ba83b2a454b5de4bf1

  • SHA1

    d5e9f1c71b6fc9b30c61a7267a4b5b032a611c9f

  • SHA256

    6a06e74bde0a136b6d9b96b6093e1fc6d09f78adb6b167adcf82106356de3388

  • SHA512

    5155e3aa8bd6a5c405bfbe92c66ad6e616b6e3c8c07d7ec5a54e09c247f8c3e514696e4104a71903f5f22f38085c68529f1df6eae46cc1edeb89725b76423e8e

  • SSDEEP

    6144:wBlL/chrXUIY+prolgrBh6tikiWFNXiWX8+:Ceh2+prOsz6ckZzSWX8+

  Score

  10^/10

  formbooka2d5discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    $PLUGINSDIR/pesaakdq.dll

  • Size

    33KB

  • MD5

    184b758268965aca6018f69dfe7d18d3

  • SHA1

    3a25a53a14f5639ff368a33e8ec8a806d059c7eb

  • SHA256

    a8d25a38820df99aa1b1be9dce4a30a99ec01c11287fe75cbdf02f8120e4935d

  • SHA512

    aca7cee419ed6bd1bfe30f25d1cd59f8a5e98c88ba1c786e3f9b5814fd316d26d7e013ab6b85a475dddd598756ee4f3fea8027dbb693d54f6fd09e094cb65e85

  • SSDEEP

    768:rLUr9syb+VROVYKXdbc3X4FCSzKFPXtFfHAmfA3CmauJJ9t6FezTiKFH1Y5F:rLEs8pA6gA3Dnn6szTiKFH1mF

  Score

  3^/10

  discovery
  behavioral3behavioral4