Extracted

• • Target
    rocrocc466732.exe
  • Size 368KB
  • SHA256 9b8da7ed293e5293ce73a4fbd1425987fa548194c416263eb46ffaec57c5f741
  • MD5 085542f3373f3f419c6ca1696eb11ab6
  • SHA1 24ace54ccb9e31ba7158c7a7cdfbb246d2cdd213
  • SHA512 e86cfedea9b9e554addfefccaaf3ec4d0866f197675c277e5f4ea15673336ff4ba1b2a8ff7a568776559b69f8735f273e27ed9f9062200e9fb14a44292467f48
  • SSDEEP 6144:vYa6L1b/tIfJjCf+RfWjAe02OgPqbnscdmtcFGD7O6Z76nrxnulJDbcEIzfvWmsk:vY51TsjtRfWj02OgCbsptgGD7zcnrx0W
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookre29ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2