Extracted

• • Target

    980c09040af5ab467b0e902c8097cb83.exe

  • Size

    420KB

  • MD5

    980c09040af5ab467b0e902c8097cb83

  • SHA1

    efbd7fcfc5bac7aee07b2715c492ff71df54ce48

  • SHA256

    843c93a950a42ce6ccdd4debb3b505ee31a696637c523aa3cde37876a940d1d1

  • SHA512

    d1524131c82bac5e4fc6232963694d5c2944fd1ad52d7c394fac449c44f498f474d130217ec94a84514897cba02060207b564c640e056c85536356896f1e14c8

  • SSDEEP

    6144:oYa6eYODUglfIPtpIGAmRCXODtbOy0FD5GHfE7pV5gK8noo:oYdpIGAmMe5SyYtGHiuK81

  Score

  10^/10

  formbookvr84ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2