Extracted

• • Target
    dekont.exe
  • Size 304KB
  • SHA256 57fe0dae74f8e533c4f38b38d1da6651e9e3569e3d2fbb24285f0e2d33f2e133
  • MD5 ee3f853e3c9f3ea7952cfa87b9a8d880
  • SHA1 5ee056f976e2bdb798e74e1ed55fc21e03e2d257
  • SHA512 30a03b625af8248ffaed4a2afe8b0994988a311c6c02e13089c70d788342ff7d683fb849ba38973bdc3dfdd9a15df258827ce25c04e22616b6a5a6da92556bfb
  • SSDEEP 6144:MEa0Nsf7sC6geA1a0+1NFzH3DAC0euh7TTA7msfM9ZF:XsfFw0+JzDWeu1TymsfM9P
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookb31bratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2