Extracted

• • Target

    b561c766f16984cad7bd9303131d69da7cae866a

  • Size

    445KB

  • MD5

    7f86f5c4f81ec48b4b6bfc92b29ec751

  • SHA1

    b561c766f16984cad7bd9303131d69da7cae866a

  • SHA256

    63ec01839919b7f832954e17b9259a74fe90e0217f178dbd5f7661454af4c91f

  • SHA512

    d040eb130075902d49536dca8b1abe4bc49ff6421884a793da73f956bf614806949b89ce602168bdc5a55af111871ee4120654f136914e4e63d2170557806cb3

  • SSDEEP

    12288:3Y7shrtvJ4uNMIL/TJF/DaYVgl5NVx1fFHD02SJZ:3Yu1KA1I/FXngPZ

  Score

  10^/10

  formbookvr84ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2