Extracted

• • Target
    FT - 20221202.exe
  • Size 257KB
  • SHA256 6edd37fb895163628297cdcf7898da03027b960434bcae3404cd9fec27de1012
  • MD5 48761a585f2cb5ffa54ef767bb18abdb
  • SHA1 71483ebc4e70dfee81e108c38522a4f915b19600
  • SHA512 2594db7912073a8a69b632efd832eb800519a87af1045816ee4735d650ea410156c9cab93cc7ee8b6e06994bdd2f4fad62fafcbac399dc92a9fcba3af4ffa284
  • SSDEEP 6144:QBn1PrZO0xliJYVYpu0OSmzleoJuou5KjfByDdDC0U0:gz40xkVu0BoSKdiCN0
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookb31bratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2