Extracted

• • Target
    shedfam.exe
  • Size 880KB
  • SHA256 c9cf9f0fa6980019aa3a93b9b25ca2cf14cfad4b4afef12d43a20ece34d2093b
  • MD5 c0a85d86855b257b25572aa7d9d90381
  • SHA1 ea5ce824d225c0df297586a2c6621aea5ab8584b
  • SHA512 373c768311b5385bb45c0558a1bc112c5c8b4d9cceeb5fa41577a5a4f3a936aff6745bf0d6ac3fdc84a17d3eb518cce5d1e4744cdfe64cd35e4478a8693fd11a
  • SSDEEP 12288:Avy7P+vzXkpdeYfU+Ey0LOPmEBrNU4jMmrKJVNwysiebm4M4qXftsFf:yAmvgeYc+EAPmEVNSmObWy7eCn4OtsFf
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbooksk19ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2