Extracted

• • Target
    94c0a1af6f9c1f1eeaa17874f1714551.exe
  • Size 550KB
  • SHA256 4db9930e1b3bd3619dff0a9362076cb9e008763f451a53eb72e616d7d032af08
  • MD5 94c0a1af6f9c1f1eeaa17874f1714551
  • SHA1 db619959d6098322f4a668a4fdede8438627c8bb
  • SHA512 74c0f068fb527378337f732a7cd7b751cf0dbc2fa3876a72b81fbe19e111b49f008bda71e68e2d966d2739dafbc2cb61a2330871f9555f9b16b00f95d493c763
  • SSDEEP 12288:vOurfc/jkvTXVGxxRgxZ/UzX+y77ZtLp9:v9I/gTXVYDGZaX17z
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookwh23ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2