Extracted

• • Target
    b89438b8ad038b570457bc1bb4e80a73.exe
  • Size 432KB
  • SHA256 548fb330ffeb62ab1fd674a557606885338344c8cc807e2a3f9c64e475bdf2c0
  • MD5 b89438b8ad038b570457bc1bb4e80a73
  • SHA1 29272873dde654da28cf1b1cba26e9614ca6ec8e
  • SHA512 cda5d2f9d434b95613ac8048e781e1e598f48682a46d7498cd76526dd755873e6e3d92a437f851f087df3a61bea7395753895b398db7b15c246afe9e0f110b71
  • SSDEEP 6144:ukwkDeTURwgORE8KxO8c1QWXa7RLvL/BAEhg2+6Ha/V:PD8owgORE8KxBWsRXaEhxa/V
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbooklt63ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2