Extracted

• • Target

    1546e632cb3cd6abb0497a1e941d7c1afefd3d1bc7582b63f49d948241406b80.exe

  • Size

    328KB

  • MD5

    59ec68c614cbd08f061b98ee2f7558b6

  • SHA1

    518e36c73b44331e89a74c651ddf64e9ad79ee10

  • SHA256

    1546e632cb3cd6abb0497a1e941d7c1afefd3d1bc7582b63f49d948241406b80

  • SHA512

    9e7efd81d2cd1ffcc35d76f33b24f96ebfe459f9768ff29fce9d56877471dff8ef1dfe469b3ff045eb913cebc30a8b44d0c3cbe1b46f6fc7e7eaa5c853eea99b

  • SSDEEP

    6144:ptxBKhzEHZ6pqRMVr5PdD1IQnAPJrueL9KEzbIgsfd+O2hht9lKSYS:ptLKhIZ60+VrVR/UJrueL9PbcV8jt9lH

  Score

  10^/10

  formbook4u5aratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2