Extracted

• • Target

    31d0788e3cd2c03d23d92b8b2b8d6b99.exe

  • Size

    328KB

  • MD5

    31d0788e3cd2c03d23d92b8b2b8d6b99

  • SHA1

    1d8d40796fbeb7b11494d9a170e9075ca57cc877

  • SHA256

    1d504613d93ba714b247d0b35b1182cebf4a7b3bd33261f0aed1b7fdcd2e3075

  • SHA512

    224c01004cd008866cc2995e2d80d749982e62bb4fc058736bee80190b49e9a2935a033f4d376d8d6f73f7da7061e11a29c191d5ad4d9599006ac59c7eca1605

  • SSDEEP

    6144:tNB+sYuZZRk0az7XGZBgc4BLbNBmR03HivnMR7xHcn5a:tv+jcAT32HR0n7xHcn5a

  Score

  10^/10

  formbookqsqmratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2