Extracted

• • Target

    file.exe

  • Size

    73KB

  • MD5

    9f3d2f161ab12215d8127143188fadc6

  • SHA1

    2fa3f6914fe95ebd19d6395fed3296dee351ec56

  • SHA256

    42ff33d8a2c198145c876fbfab4855fa43faaf292d10c73f144619c34714f97e

  • SHA512

    b2cad85987c0b431323396a68a609422a7665033f25f43fb7e2430b192eafe00d375ce8b518385b962d0b4601ac170184096f5b5015e536c5cf0419fa22c5d61

  • SSDEEP

    1536:4WmCpPvpguzG3Uj/mvaVaDLGnsyjLixPd:4W3PLzUSmvaVaDLGnsyPA

  Score

  10^/10

  formbooktu7gratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Blocklisted process makes network request

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Suspicious use of SetThreadContext

  behavioral1behavioral2