Extracted

• • Target

    19bddaeb1d8938d66673c1112d8d471c.exe

  • Size

    348KB

  • MD5

    19bddaeb1d8938d66673c1112d8d471c

  • SHA1

    bf2328c1d812a511afefe8b390f0645ed5acf17e

  • SHA256

    49b9d1d18db314169a965dd873c7811b055675d2342a19f82a6c4ad3c3a5d324

  • SHA512

    f0d691d657356d2237a6d34a63e350c418fc20c931cb1ea81d994cbdf952ac0248fa750a5e80fa7fd48b2e65035c2d3e2f6cd8aae9b2cec6026351ec245c3eb3

  • SSDEEP

    6144:/Ya6CSz3M2skORlRU6dRqgcj3iaQ6UB0tCA6CT4MaBXazV:/YVbM2svlRHdMgcjBQlBrpMxV

  Score

  10^/10

  formbookpe63ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2