Extracted

• • Target

    d5533b2db8ebdb0e7749297cc0f28036.exe

  • Size

    407KB

  • MD5

    d5533b2db8ebdb0e7749297cc0f28036

  • SHA1

    9b1f5a770cfaabf967954452666c2eecfedef5f8

  • SHA256

    edeb0a8fc8b7616f7c4281f7dd0fa0d5f5c8eb8cfc8b07dd7de049765ee44492

  • SHA512

    81b2d207bf0760b5ae7997de55ccee3f9eadec75cf37de7c6ab20b6e31196122d5b1ab31560b62a8d5829a3fedade7823cc0ddafdd4f773bbedd5acb45fb6d36

  • SSDEEP

    6144:UweEeZqXO25UmTc7ZUMK5glLR2ddtRSjol8LBHpBeBT+fwX:SZqe25f7ulLkdl8oYBH7e0w

  Score

  10^/10

  formbookwh23ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2