Extracted

• • Target

    file.exe

  • Size

    260KB

  • MD5

    31319144a917439aa8e961cce95f82ee

  • SHA1

    eaea6b758bdba74243099d60e8dd65dcbb524351

  • SHA256

    b4455821387f7c5571cf3aa28abde41c188593a4cb5f59d0f1e9c368db49348b

  • SHA512

    0d28854203e99f9d35fbbb920a23d9829cfad3a2583d42c77515709963c347282737b7ac545673a3b7951c4e44e4c4c37209780ef9a498eeca1ac81948dccf62

  • SSDEEP

    6144:DN92Cag76LSVVz83bwo0SEkRMUEU4zRkaYKGfb:DNQg76LSV4Hf72XU4zRyKGfb

  Score

  10^/10

  formbooktu7gratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Blocklisted process makes network request

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Suspicious use of SetThreadContext

  behavioral1behavioral2