Extracted

• • Target

    aa05023887117e6f52dce6ae40dcab9d.exe

  • Size

    272KB

  • MD5

    aa05023887117e6f52dce6ae40dcab9d

  • SHA1

    3f6c3e8cc656a436be4ddbc248432e48dcd8aa0d

  • SHA256

    6c3654d20a676bf9b7f77546e23bfb3a7d2d23f1d535d0feced966a22ece5d60

  • SHA512

    329d06ab016a9413e5320170d1ede46dc50d3a4aea13efc600919858e8100ff3b56b8934f0815a4f3cfed45e7641488f9768b6635c03504ba958194287584362

  • SSDEEP

    6144:BYa6q6/iwjO/07RXNHT0uZ0w+5IoujNbjcgTAgqZ6VOmA+:BYcKji079BV0/IVNbQgMkw+

  Score

  10^/10

  formbooksk29ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2