Extracted

• • Target

    tmp

  • Size

    259KB

  • MD5

    4e8bee4ffcd91df4d0af5ad5809a5836

  • SHA1

    f667fdda0388044884a7b98a9e25c79344e986ec

  • SHA256

    fe69a7884252cb7f2728065d43e5143e1c6168b5800813154f70727a97f78fc2

  • SHA512

    7d78d0fe3c3d761db9e79de77d2100d829f46b1c343e0fe0d59c2f6e30a41ed5ab3bbe6d154b01b71c1883a824f458865d0614fe40c3178963ef5ecfe079185b

  • SSDEEP

    6144:/Ya6Wp9dAl3KJDohZfDxO9rItqosk+MMnrSQBQvfD+DnYTT14UPj7Q:/YopwlqM7D09stErqQKvfAnYTT1PY

  Score

  10^/10

  formbookho62ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Blocklisted process makes network request

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2