Extracted

• • Target
    b705c0d51e75c9dff2ad3a8d10ac2842.exe
  • Size 603KB
  • SHA256 afbccae6537d0602edbc99ef03ec8b89ec23df241079f949c0b8a0aa6f9aa8f0
  • MD5 b705c0d51e75c9dff2ad3a8d10ac2842
  • SHA1 d456a765a1bc574ce086a9182beaac1450928454
  • SHA512 5886fb132ccb548a858634663972994cf545ea8e3bc48322003c237f92d52fdec615413e22d6614a1d6d1af68c59084eb264d403fecf286e3acf9c674ea21998
  • SSDEEP 6144:iYa6guelAA0I4YY1LUijqkuZcGC9Uo3AoSlV/RLWYOW5l9FT3nN:iYeLOI41LU4qtZhC93wLlVJX5l9hN
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookpe63ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2