Extracted

• • Target
    ea54d53d78ae0254a2cd836034c4915a.exe
  • Size 465KB
  • SHA256 8a013f0ce4ad8a801ef54f5fd3da7215783162d76eda63e515ad7a9de3e82a9f
  • MD5 ea54d53d78ae0254a2cd836034c4915a
  • SHA1 42491b486f6968363ea81f27b43df1dbb90fc748
  • SHA512 8114d716f448ba0bf88c8fd248a59a62cab08fc3b3ea67d898e903741b76f6b17945607e4f138235bee094991291240b8cd301de782a7622273e07fd0d9aefe5
  • SSDEEP 6144:dwDUVhh81dL6kM1Ur4akSeQ0bGZHQLq8kVhwujU94sDGzsSR1c1r0o8d97ckHQ:eDUL8eUBJ0b8u1khsDGAS814oMckHQ
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookaoj8ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Suspicious use of SetThreadContext

  behavioral1behavioral2