Extracted

• • Target
    ef0d68989be53f212787dc839ad5a8f2.exe
  • Size 741KB
  • SHA256 4e435e50e9e7257803adfc263bf123092af3a4cebe9cf8f34669ada370109552
  • MD5 ef0d68989be53f212787dc839ad5a8f2
  • SHA1 530d6ca93b68542ec2354e6b2b9401bf1e6b25fd
  • SHA512 0a6b48fd82335866112b9433214034f125dcc02b29ab881dbd64be220b8fc30c2282daf4b7d2a9094db351a8889500d2ee52d4cdd5a8c8bb9438da0bb9129f3d
  • SSDEEP 12288:ayIoDIP8DMmTZkNiNdjaSEM7j5KFd5hmzDBmrDVNL1k1wm0FMWgPszW8YV:ad3QTZkNiNdjaSEM7j5KjilmvNMfdEzY
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookwh23ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2