Extracted

• • Target
    SecuriteInfo.com.Trojan.DownLoaderNET.447.20977.3617.exe
  • Size 56KB
  • SHA256 82d2378bbc0a4f389e630a970cec55a3e4d2686894df1ca2f505943d458a3d51
  • MD5 822f84bdd35727d0dc768723f9e45972
  • SHA1 55329ec8f12ca0456e32ddfeff070c8252b8f5bc
  • SHA512 9998afdf6ade365305b070493ab31257675f4e1d9049682de71f8b5c408e76ab6ca87a753c1aa8f07dc14a03a52d6c473318b6ef50ac3d0edda57a427d27b917
  • SSDEEP 1536:oAzPpga/eHUTQQQQQQQBdBgN6b5/2kWSC6WLr53Dvas:zTpga/eHUTQQQQQQkdBft/2YWLr53Dys
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookc1noratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Suspicious use of SetThreadContext

  behavioral1behavioral2