Extracted

• • Target

    SecuriteInfo.com.Trojan.DownloaderNET.345.13381.27886.exe

  • Size

    673KB

  • MD5

    e7ac037813e0f4fa8d32974a542a2d08

  • SHA1

    093356469b8932c6168e43d427127d7ed5b56af4

  • SHA256

    1734985df87235e747cf465d2d8d192f609275a7193a723764c8654b47357083

  • SHA512

    e0fe51b1c332d763318cfcb486280d6c7af34486d01dbec9b8b994bf7a69270194ad243299f01788f5781ae5fbe99575dc89bd126d90abac27c186efee14ee33

  • SSDEEP

    12288:xZNfbYhbXbqhf/groDmU2md5mq6yCCDEa4RUOyV0eeoWtO6TGhAh:HNfqbXbqhf/ioDmXgmq6yYaAgOeeoWt/

  Score

  10^/10

  formbookctapratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Blocklisted process makes network request

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Suspicious use of SetThreadContext

  behavioral1behavioral2