Extracted

• • Target
    74dbba23f7a7f3498481a9b2625ff503.exe
  • Size 385KB
  • SHA256 0d6176e7f7745ff010f186e65cc89fefbd3ce331ca37a2b02e7a42ed4fc6c44f
  • MD5 74dbba23f7a7f3498481a9b2625ff503
  • SHA1 e01bc7d9c2dda927b7a5ce9d7b191e1128d7d984
  • SHA512 ae1ddc9796b7defe344b4643012f34a70299f81c7515fc83c9ca255f45925909e6b5239e5b9c523033da658d8c874576270aba3e4cd416cdf91a3e3e389b09fa
  • SSDEEP 6144:oYa6ttdn/9eV0dZv+bp6YBYun6bLMxpoUCvqsJHtzZMPX8+I3neISvcye:oYb9rmbp6uQLnUOqQz2PfmneISvcye
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookvr84ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2