Extracted

• • Target

    BNK0002334789532_USD28,770.00.exe

  • Size

    637KB

  • MD5

    d7efd600d714d6d2f6b7fadc6adec0c9

  • SHA1

    ba35f96a741637af1d1319074396f1bf891f13e1

  • SHA256

    fe199e437de02d997427dfea4e864f386e12887c5ae16d2acc465417cd539521

  • SHA512

    f4e1558763fb4527ca464c7a7f8a533e4fa0d4725e97c956b83acd2ef503a056930526c6e1eeb28263d9e6bbc820be2fc110548e0ef8cd28dc003cfccfda8f18

  • SSDEEP

    12288:90zcBpbKbfzdHP/FvT9mzyK8DzVlCxlASlDAMTQu1c66XZp+:9hbbKnlJRKyKUBExjjcp

  Score

  10^/10

  formbookuxperatspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Blocklisted process makes network request

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Suspicious use of SetThreadContext

  behavioral1behavioral2