Extracted

• • Target

    50fe8f68de11579bdf0d4703cc9e6a1f0f9817a5605b15977c229bf5c522338d.exe

  • Size

    349KB

  • MD5

    ba645c8235d19c8407c81d62470eedf8

  • SHA1

    9b78b515d6869753e2bb3e46d1307deccef79e57

  • SHA256

    50fe8f68de11579bdf0d4703cc9e6a1f0f9817a5605b15977c229bf5c522338d

  • SHA512

    7efa198fd976f2660fc033f708739c003210ae88e50938abec6ce919e85246ca4a6d4f3db0e105b16094b08a68ad1234b5986cfed43c90b239369a46e95a65de

  • SSDEEP

    6144:jYa6a3R6bVzifniXpVKRNQfgwq+DMhfii10dqeH+QE:jY03RYV+Op8Ugwq+HiSg0PE

  Score

  10^/10

  formbookho62ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2