Extracted

• • Target

    9123b739b8d3d1c2f5a3dabf8c358c77175422d0e83f5edadc7584bd50eb484c.exe

  • Size

    264KB

  • MD5

    c1a8c992aac5a10c6ca89cedb772d567

  • SHA1

    99ad74abf2717a297260df450e105e8a40cd16fc

  • SHA256

    9123b739b8d3d1c2f5a3dabf8c358c77175422d0e83f5edadc7584bd50eb484c

  • SHA512

    cb3f735fa6f68fca72e596a658db049141ce2319b718df578f755efc9d2f302c1b3407e1a6190d3dee1c4c67f7a33e2440dc117f4cfef16301f2e1c303fed450

  • SSDEEP

    6144:gYa6+YxKBm16Bj9lWAbkKXVa9S02ZVh2Qs/cEpeXzhdGZbghHrOSh:gYI7maj9tk9Svu/cW0zhsKhFh

  Score

  10^/10

  formbookbn26ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2