Extracted

• • Target

    SecuriteInfo.com.Win64.PWSX-gen.17395.4795.exe

  • Size

    552KB

  • MD5

    46333b6ff15c92a0338fb82a3ffda095

  • SHA1

    e0c71790f415c5894a89c72f047fc2080e920ee4

  • SHA256

    71562f1899bf12998b47d4f245d62c07e152a91ee9191dfaff9a963e3fcd3f7f

  • SHA512

    92644ed70c4f28a72399c98ec8c5e72ec4c073e31069a6887dc2a265f6e58c70d7c5f6919a8c1e99f922a939c899e72a4711bc87e914ad053233012e623875a0

  • SSDEEP

    12288:GbXKERz+4rqtEmCqfupYcjyf5ITpqRiixvx4bsFslx+haSw8:GtC4utExqf6YX5ITpRixvx4oFslx+hrw

  Score

  10^/10

  formbookurderatspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2