Extracted

• • Target

    ZiraatBankasi-SwiftMesaji20221123.exe

  • Size

    1.1MB

  • MD5

    0f46ecb9b5ea6f5fcbaf7056c316259c

  • SHA1

    bc171b3c828566a705e82dce3a96f78e836c2dd1

  • SHA256

    8a530805d14a1d39f4016d711091acc26f7404a1dca050407f6d6ba4eeaef0f5

  • SHA512

    8fdde0979eb61549793725bb95455291a32ef7b674af43602239e697886941d4189d35ceb9b70b5e440b4f480fa8e333dbb960b4b7f586061697296d14a73bb4

  • SSDEEP

    24576:8sGpbZ7QlqRYYlQ6SdVqeK0kUBwUaFkwWR+UBqdOp:iNJtRMnV0UcywWR+UBqdO

  Score

  10^/10

  formbookgo5oratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Suspicious use of SetThreadContext

  behavioral1behavioral2