Extracted

• • Target

    a0f1b339ef38c5d545a7357492b8a327.exe

  • Size

    327KB

  • MD5

    a0f1b339ef38c5d545a7357492b8a327

  • SHA1

    fc4da48839297bac23538e32354b72fc68d464ba

  • SHA256

    469162ec601c979d1e51ad44ea01fa8a4520d650773e7280918128b43691f2e4

  • SHA512

    7143ea53ac918c1affe6bf55f7bd8214e70b02f4bd0bd966eb1ab765822806800ed7d44bdaa49d07c560925393db7aa7fadf954e1381ed201beecfbc85af0a53

  • SSDEEP

    6144:vEb2RYmNJaftegaqDDsjZ5dbr+tzKCc2omW5B8tCaJBg7F/k9:im/aF/54jZb3Ez9crB8Cak7xk9

  Score

  10^/10

  formbooksk19ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2