Extracted

• • Target

    SecuriteInfo.com.Win32.PWSX-gen.6073.10168.exe

  • Size

    833KB

  • MD5

    af1defe4819022be7eba839a12ade9fd

  • SHA1

    1d78fcd4864e9f1ae4fc1f96f528da2beca83515

  • SHA256

    d087e426ce79e771312bb70d624f2ac316b675fe3ebc2eacc1accb787f84eeee

  • SHA512

    e4a405a0ac1e3a5d6aa2a497e90a9563e30591f91524791f2e6d28f06471a543b51eda69fcfe2db73748cd91c12ae65e85c5f1c0f095706ef07290b50256ed39

  • SSDEEP

    12288:83dB6o2ekH6q9PqfiS0lPNWVNYhe0bsm00py+2eX17nIglrXycuqZjDJEbrkj:sNCBY8e0IV0b2erRDy3

  Score

  10^/10

  formbookg2e8ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2