Extracted

• • Target

    a44404aac23672009dc1d835f223d35b.exe

  • Size

    293KB

  • MD5

    a44404aac23672009dc1d835f223d35b

  • SHA1

    31aee1e8489ef5b6033f24050ff309941f8f38b0

  • SHA256

    1a82b5f2c6d3897569544939dfae30457d05924c8811f009d0cd1540319ea90c

  • SHA512

    2a70e223ca53759418bb42caa5d90dee2629f18815035f4cb92296eddac284f8a4074cfc9efada30ab9c27305e14249d5cb3731ec18fc41fc87695a6ef04357b

  • SSDEEP

    6144:0Ya6qfeaNVq78yPmAR6PAqqQ1hPP23xulTtZ3X3fCA:0YMmaS78yP3g4qxYeZ3XvCA

  Score

  10^/10

  formbooknes8ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2