Extracted

• • Target

    5b24cd0bee40fbc64c05e75ae25859385403d66e2bfa94cc54e23660586e6f1c

  • Size

    236KB

  • MD5

    c50a2cc60d44200eb6c7573c4c422873

  • SHA1

    0ddc105fdf443d24f56e013e55828ed111df3270

  • SHA256

    5b24cd0bee40fbc64c05e75ae25859385403d66e2bfa94cc54e23660586e6f1c

  • SHA512

    b5bc4deec050a33909eabde3e76f641f30dd97cf6593f34e3920c01ef96512ec6a00a7059a3991d9a0408119829c6794131897c61c60c69c7b694e17002512e4

  • SSDEEP

    6144:qNSGIR41RPlyHW93igGDeT01awFKrQpap:6SGe41BlB93nTOTKaa

  Score

  10^/10

  formbookugezratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Blocklisted process makes network request

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Suspicious use of SetThreadContext

  behavioral1behavioral2