Extracted

• • Target

    SecuriteInfo.com.Trojan.Mardom.MN.24.16425.25955.exe

  • Size

    437KB

  • MD5

    70cfa5167777582bdeeadb50e056a9a6

  • SHA1

    4018b878bb9582933b67b30c80c148fb652d18e7

  • SHA256

    3f484db21bfaf4f98b9cc9446c3d667035bcbf576b1d6294daeb2bc9a0dcba88

  • SHA512

    94f852371b911828754407badec5fe2893b25de3c2155d432643584e67e041cec316495a9afe35c6e0233f8e5b4bda2361c8868f7d9d1f7383aa1bc4e0babc07

  • SSDEEP

    6144:mUXmX2EEXNKzFh7Wxp3jz5Ykzu64QGvJHs0e9JIuV:9X+EKjI3j664Q+PeZV

  Score

  10^/10

  formbookermrratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Suspicious use of SetThreadContext

  behavioral1behavioral2