Extracted

• • Target

    swift.exe

  • Size

    293KB

  • MD5

    b63f00f4bbecd14217d4d9de887ff832

  • SHA1

    3848bd9a52433f94bb77b41e77620323b3faa0e0

  • SHA256

    3af2c0904f3729e0408f6479f4222d5fbcf695f2b5cd32e8737e8690661bb18b

  • SHA512

    73f703796d982e1f32264cd488add845b4c71cb7ab108be116d450c6e94d771f7b40254e4963e9c9190c42eb9b7865dc66ec334f96d9aa68a8d95b190baa66c9

  • SSDEEP

    6144:vYa6N0CqudwpubkE5cYtAqStGC3BjAsnlE7wbWs6tV1w2HIN58Zj:vYv1q0bLOYtAqSZBjxnlEMqs6v258F

  Score

  10^/10

  formbookk04sratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2