Extracted

• • Target

    NHYGUnNN.exe

  • Size

    269KB

  • MD5

    4f9c8432b57fa1aa875071de547ba947

  • SHA1

    e1cc52fd851621743ba562a65161bfafed8e6b2b

  • SHA256

    9f0d17930a9312b8d8dfb23119b57fed676a1bb15fc1582754ab94201651b221

  • SHA512

    ced221c2e5225a8ead486e52f1c5307b24dbaff8864c7262f2d6f58cad3184753d1f2afe525c3afa122ddcafeab38845dafd2f7a22169bfac026375e7962481d

  • SSDEEP

    6144:RhwendE8+/O+oImP2Qcy7ZwpeA9pg6Cer0K7+UUcT9gxyRClRcOpoik:EAHdP7ZwpeApT0K7+UUQ99RORcOpoR

  Score

  10^/10

  formbook4u5aratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Blocklisted process makes network request

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Suspicious use of SetThreadContext

  behavioral1behavioral2