Extracted

• • Target
    ödeme formu_0001.exe
  • Size 263KB
  • SHA256 ffc7eef1092b78448529aa79724d73c5babc66fbc440d767b0c46d9037b40ba0
  • MD5 6ba6a3976c46e385615ede0c7584aee3
  • SHA1 0e9a3ee2ac21bda49a03da78a914a01a7b8f9db6
  • SHA512 6b118a1188fe5300c00009d81a4cf399d32dac43bafae4da76bbecefd4c8ee8a601f7504220621931ff06a398e9680eef11414ec15487d7cca93562861af2445
  • SSDEEP 6144:vYa6j7KXS9WnHtBBNelQNnxOf2JKeG71gOMTu8mAjJDrmQDF7:vYxGXSaBBNelInxc2JnG71aqE1rmQD1
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookk04sratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2