Extracted

• • Target

    36f515bac3960c07aea759f03208f901b84050cd57c84a2fce20e92b83158b3c.exe

  • Size

    228KB

  • MD5

    98f963b9d7225413ec18f48a473c1f40

  • SHA1

    1272577d90b8d212416732e54258b136cbd2f3d3

  • SHA256

    36f515bac3960c07aea759f03208f901b84050cd57c84a2fce20e92b83158b3c

  • SHA512

    778b186ef6c85651bb722701ee77785aed3bd51048a3ecd12423779c8b1ac640eea61a85712ceb03be48916b8c20c587adc4ee9f625f3a4b96a442f9b550b579

  • SSDEEP

    6144:QBn1yQEl9B3my7WMRNICK7WtIGpUv82m+mLZxhhO4+/:gnEl9Iy7zRNI7BGpU4L1J+/

  Score

  10^/10

  formbookje14ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2