Extracted

• • Target
    fd498a1be2c83df884266ad732f7a3c4.exe
  • Size 304KB
  • SHA256 d79d4f61a8ac7e72f4b51fd872317a7d9feb84a46e47bebd09eb60c8a34ec057
  • MD5 fd498a1be2c83df884266ad732f7a3c4
  • SHA1 d75f3be9a3ab927ede5e4953a28c99e6b2584cec
  • SHA512 b1280bce16fb24c3b042eb391faf846da9cf3409ca6ac21d1f584b14c1f9737b7e7cf1fecf47b8ed49ab26df1f53af69972806a5656d7ae10adaa70005a93772
  • SSDEEP 6144:AYa6o14m7yrnRJFJ65+ITi8iUDQ8WjPPznEZK96pEapfXBHFK:AY2GRsQITWPnEZo6pXpPNk
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookb07oratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2