Extracted

• • Target
    sipariş onayı 0052022.exe
  • Size 255KB
  • SHA256 dc3f7072eb60a4282bd3f6e8fa600c17a9c9f8ade539111bcadcab024a186455
  • MD5 650028e8788e52e3bee893bca43bfd47
  • SHA1 cc68ca90df5089a900ef068f6857056036a77aee
  • SHA512 c04e6d3cc458e61490be1d57e695c5949aa9ec6ba371359412120e45fd361c43292a7d0960d20ebb88e526265693f7085af6e5e9ab530aa5d0a225e3c0343a89
  • SSDEEP 6144:mbE/HUb0RS+fI7idhVXw8QI9idvzPnwNFTJpFODZTLi8PQvx0mk:mb/f+fXWII9jnwNF6ZHigQvx0mk
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbooket02ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2