Extracted

• • Target
    sipariş düzeltme.exe
  • Size 259KB
  • SHA256 4357e6c74bd16dcfcf4afbe5678f5edeff145db572ad937555d21dac6c5c5c8b
  • MD5 f568b0ea2c69fb1af449af264b061bd7
  • SHA1 81d5849ef237f0bb5beeb218fa7133d3a2e71880
  • SHA512 3c978547b28572fb632395d4b563ea58fd10dcdb83894f8f78b8fbf58ef4cf4429928f4a466753f9c6e15ebcf8270deed1496986a4e21a1af925ddec0a4c8f33
  • SSDEEP 6144:/Ya6JAnrPb0maPtYAHELSXKBs04LiiT7S0mSKvWn3xRV:/YTkr4PtbHEmXzzS0man3xT
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbooktc10ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2