Extracted

• • Target

    b231e7d8369f13df570e824dd65c5e44.exe

  • Size

    431KB

  • MD5

    b231e7d8369f13df570e824dd65c5e44

  • SHA1

    5fa2fd0746bce832c00c72a8a75d864ad1793b19

  • SHA256

    19907e5318d4427729e86994feffe2418e2d6aa0c2a97b123bf553f80f0b89af

  • SHA512

    9daf9c63b00782ff2f9676d6bef5d4694ea1a4480e6a3f8e2dbdd93d5a7ea506c1e222a563c196ddbd74e7b75193f5b67cf93bb26dc16d285dba7b189eb5dde8

  • SSDEEP

    3072:+fY/TU9fE9PEtuSbQAdM95pqs0eNntYHE2mEYgP90Wcmytku63N1fc7FYjjomLMm:oYa6S9m/KlmEL5gszc76C4uAC6WtlxM

  Score

  10^/10

  formbookpe63ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2