Extracted

• • Target

    d67bc9de761645c9aa4b5669cd355f2fecde8b4e9b22f64f327f282754742031.exe

  • Size

    356KB

  • MD5

    89638fe1a25c80932d9e4cb30238e194

  • SHA1

    39e2ba0f53784ba65b1c5c33c7629447944390d0

  • SHA256

    d67bc9de761645c9aa4b5669cd355f2fecde8b4e9b22f64f327f282754742031

  • SHA512

    d2c8474b02dbab013bb1924826c27e04e32ac260a58ccc925624c65411628ba252992f9e7fdd931a961b18a75d0cb54289e14a36dda708a4ae7cb2d28719b801

  • SSDEEP

    6144:/Ya6QPTmatecxGcFxZci7zQiJtMCnTiyaaMvJZEFST/WxHNQow:/YePTmat2cFcivxTvktvUS8eP

  Score

  10^/10

  formbookvr21ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2