Extracted

• • Target

    SecuriteInfo.com.Win32.PWSX-gen.26326.25002.exe

  • Size

    573KB

  • MD5

    761d7c3beb6db8dba8db49fa54077d29

  • SHA1

    2258d890134463dc7e950d49cb49d3980e01bc43

  • SHA256

    2a08c4a174a0c90f8e3981182172493c1e729668fce404401a7e20be3d8d8beb

  • SHA512

    58cf7fd319668a1fa3a3da64fd19aea95e539072839431e3698b6a6b35426e5862eb23fe1de0152dde3d546dc5ae6cba217c12cd3d077a4d5c3fa62ecddb3b75

  • SSDEEP

    6144:1pqYmkA0GoPzz6qey+humMdxMDkKrIgnvom8Wop9tQ8WlYxhm874cygVpbeIn:DqVkkoPzz6s4MArI+1op9tQFYPUceIn

  Score

  10^/10

  formbook89nzratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Suspicious use of SetThreadContext

  behavioral1behavioral2