Extracted

• • Target

    92def0a070b0a1a1aa3c2b1ae43b197906d69a87014636106f1614e496a45c37

  • Size

    316KB

  • MD5

    3aa0e6e99975a48bcec1d2baf1f7bd36

  • SHA1

    5e49f0fc1f352b896305996dad3c05d8c2e69b21

  • SHA256

    92def0a070b0a1a1aa3c2b1ae43b197906d69a87014636106f1614e496a45c37

  • SHA512

    51cfb187147f55699e23e916c98a0bfe129e458ed275ca3ed90efee6bcf922c87d27ed7ed0fb23be7406a8a1a8efa872a1694c5cf379ac95138ff99306cedf20

  • SSDEEP

    6144:HT5V3EklozCalSsWJrzt8ZGEl9BzSPiQ9oRnmU+qJ8gCIMh:HT5V0XCtsyeZHh2PiQ9o/+qJ8gCIMh

  Score

  10^/10

  formbooktu7gratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Blocklisted process makes network request

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Suspicious use of SetThreadContext

  behavioral1