Extracted

• • Target

    SecuriteInfo.com.Win32.PWSX-gen.569.22280.exe

  • Size

    996KB

  • MD5

    a4b95505ac0ea4f9e62da770bf60a2f8

  • SHA1

    e30412924fc260ce5842730d8f7808c5eb58471f

  • SHA256

    2c412d963b9d1020bea10e91d8aa14a58b950e3b85c1dbc13be4301c468bd644

  • SHA512

    56fc357e3529aa97f79f534daf843607dad29171a7d8318eabee5889329249b45dcb98d787f61712e220cada3e1f8872bb4b1ec25bc094796032551c0329e90f

  • SSDEEP

    12288:I6wgh/cS0Rt2UnIUCsJ1hmuaB73bdgjcedXtcSEjz5ktYnxWzgRVDqlq9cVrbF:INgh/f2t/nVp1A73Bgjc8tcf5ktYn04

  Score

  10^/10

  formbookb5jrratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Suspicious use of SetThreadContext

  behavioral1behavioral2