Extracted

• • Target
    f36d70635deceb5f5bcaae2227834aa1.exe
  • Size 1.1MB
  • SHA256 44d7d2e8192f940c7c739e654cfd560b294b20d97f983c250bc66b7bdbc4ac20
  • MD5 f36d70635deceb5f5bcaae2227834aa1
  • SHA1 b3285890b66d81941f28be28c5b2f591e87fc381
  • SHA512 7828ecaca131bda8bb0de81cff491b1fd0693601d1a5d8ed213131755d9533e3be6cdff8448cada4d017c4918dbb517d73fe706998258baf2aeb1edbbbfc51f4
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookransomwareratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Enumerates physical storage devices

    Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

    ransomware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2