Extracted

• • Target
    shdybron2.1.exe
  • Size 445KB
  • SHA256 e838d341d05fb719bcecd3cd2d7e252829392600f2fcb0e6b20bec5415531d8c
  • MD5 a7b6106a0481e055df30cc10bfd7acbb
  • SHA1 b5a27318984cd9b4fc84a45dced6d3ec634b1b80
  • SHA512 e493d86d9b12185536b763da16770b40e09503b64a6f9880445e50d7c3dd33f88e2a124d942dd8efe9291b1131ad1ec7d108e0a59b80ed0248f76cc717620217
  • SSDEEP 6144:oNeZZy5phzEbNikyUntN23OFNBwgYRdoyEIAO1zHl1:oNAy5MbNiObqOFPFhS5D
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbooksk29ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2