Extracted

• • Target
    e9401ef816354b65fc208d692fa8b94c.exe
  • Size 607KB
  • SHA256 ed3318102d772c4dcecfb1e10f37cfd3fdcbaff1d340ba9c2bc5dcfe6383f339
  • MD5 e9401ef816354b65fc208d692fa8b94c
  • SHA1 291996028f7df646794aef71199200c4d72aa6bc
  • SHA512 21802ab6d6809c91bb431c72d02eec9a9b7c49f34543d49bdc3bd3d5cb2c8cab0daedfcb02c9b6de3cee3e34e411a596255362e9edcdd2407c0bee8ea0619762
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Suspicious use of NtCreateProcessExOtherParentProcess

  • Formbook Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2