Extracted

• • Target

    20b5c588a10cb18af8a01581a4dfd64c.exe

  • Size

    677KB

  • MD5

    20b5c588a10cb18af8a01581a4dfd64c

  • SHA1

    781bdcdc597b2c46b6e53e91546040adffcbfa77

  • SHA256

    50e8d5699c036091cd4866bd3892bc89c655999e3fc96194f686587c638d6336

  • SHA512

    6a637e977e2253ebf4011116947e8517e1f158c0ec8565cdd13d2c392fc44e50209c2fa528515d2f2bffdf0fae727adf7ebd1622f4b9b473833490653b946f22

  • SSDEEP

    12288:/B29wVDnMcnLvcB/BtOVaRwJHLM7rmZS2P7m0uNxoQuKR8ZBlpQbrnQ:+cnWfKtHY7EPzm0AnuIIl

  Score

  10^/10

  formbookqsqmratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2