Extracted

• • Target
    b8e7ae607f308b3340bf122103b3c3ec.exe
  • Size 518KB
  • SHA256 1c120ac2bc08fbd5455f3d5a47dd87ce73e40fa4b0f7a3cdb2d41a85c800e603
  • MD5 b8e7ae607f308b3340bf122103b3c3ec
  • SHA1 9c5c802bb8f08c598462eb6b55c852bff60e9414
  • SHA512 c125a709d3308d48a26c4ed2cef2802db9f936f89db93428262bf126c05c2913911da71b8131a5d5c6733b90b11246c554b09f6bdb23d7eddca623984199c4e3
  • SSDEEP 12288:2YOymN80DULRfAxR8z6cRxZIwcmpUr1eJR:2YOyyDWRIxm9x2rr8JR
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbooknes8ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2