Extracted

• • Target

    SecuriteInfo.com.Win64.PWSX-gen.18962.7585.exe

  • Size

    446KB

  • MD5

    26810d567e2c0bdcba316e23db1e94fe

  • SHA1

    85b7121630abf4ce123cb9356af84919b4131a5e

  • SHA256

    268b4b1d198ff77105bd88629138c10e89449a0c405af87e00bbdb039643acb0

  • SHA512

    5ffa18334b5e59231a141f91e6d8ad2e946d1e06694a99ed26e8b259fef8a87eefdf84783c9b5572cb53b8110b86e37f8d221c467233310c149b9ed78b156ae4

  • SSDEEP

    12288:EGEaxyIEHBzQE3u9AavxuAA39anZYuo7t:3WBOAuxA9aZYuc

  Score

  10^/10

  formbookt5ezratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2