Extracted

• • Target
    TF_ 0609162023.exe
  • Size 261KB
  • SHA256 53ef5cf03618cf6124b33c3ef3fbb97a993b9612b2fff665bb7de2fec5d7dfac
  • MD5 49b70397af4dc198552278ae87ebaacb
  • SHA1 b08d931594f373da2dbc8909098069248023bd90
  • SHA512 f7de995b00386c4efe92ace3b251c6b7ec4b3d270e913628e1018727f88a14d8bca511b1dff53e4502529ce2196f3a0472bdd22af4d7edc85ab25e7bb1645286
  • SSDEEP 6144:/Ya6WTPShmXUVZXRSkNaG709c7VTPqTdeU2:/YATDiDSk30y7ideU2
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookvy03ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2