Extracted

• • Target
    a9581f8ce2c82aa87456630526b62d7d.exe
  • Size 307KB
  • SHA256 b8db7c77bddbcd34653bfcb9f74eaef50a4557e2bde18214798a5c2baadedc51
  • MD5 a9581f8ce2c82aa87456630526b62d7d
  • SHA1 1b1bb42f09a52362cee059a06a72b6a029967c08
  • SHA512 db111bd7476c60a0e549e4ec29daa37c0ff8e1faddc42657e989a4cc425b0d26b703c9ae02dba5fb54a46069db8f43a1b21f14ea3cd3a017b9597d72361df149
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookransomwareratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Loads dropped DLL

  • Enumerates physical storage devices

    Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

    ransomware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2