Extracted

• • Target

    d8d8a2af9b26764004323afcb393879266daaf40afd026894b311424b50d8ff5.exe

  • Size

    241KB

  • MD5

    02eefca081505168a313a927977e02e5

  • SHA1

    4ff60a4b15d4ed1cc3733676a25b929962d64d4b

  • SHA256

    d8d8a2af9b26764004323afcb393879266daaf40afd026894b311424b50d8ff5

  • SHA512

    0f8a33342682c1e8a4c3b096c91e26cf9b18d48a28e0eaae2af450e637b3e6a00a075a6fd315ef7737e88a132005877e7af5959240452642ddadefee65ac537e

  • SSDEEP

    6144:NYa6Juz8BMG9jCpNLw3ODiHVmyfvYUeEu0UIE:NYf5RiNymryfvYUi0UT

  Score

  10^/10

  formbookgt48ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2