Extracted

• • Target
    SecuriteInfo.com.Trojan.PackedNET.1584.9133.766.exe
  • Size 299KB
  • SHA256 1c8cfb9a1902b2601d5819eb87f4dfe03c51bd99b6e6beecb95d7f749d7ea088
  • MD5 1356b082e38df3e3b5090feca04681c0
  • SHA1 85d7cd109e8da7ab7f9fdf5de7a002b6869df95a
  • SHA512 8e072efff7e68adcdcc194fff7e37e4ef3ff969221c9b059db3501b7b9f86f70549a509c4b0861ca3b58b56f5fcdb2d5a8745ada83acf1faac825986731fc342
  • SSDEEP 6144:S8GIhqHIKgzgP6i56FE4HzohXF0ApTjqUXB+rDCKQMPkQWfcBKn:dKntGhcHsHFcfp
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbooki3twratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Suspicious use of SetThreadContext

  behavioral1behavioral2