Extracted

• • Target

    0f356ec01936c3fc641acb21605d163198e1176a78f88356f572bce8573dc5e3.exe

  • Size

    280KB

  • MD5

    8153a2e7f9caf30f24e796a13797cacc

  • SHA1

    c7364c49a17e98ea406650507de21f01eca6e954

  • SHA256

    0f356ec01936c3fc641acb21605d163198e1176a78f88356f572bce8573dc5e3

  • SHA512

    651dadc58adc27ee5310576df4d92878c6f95eb4c5ad72659fd01c789a800ba5aa503be378e5f85685a7b1f5d7c18f07bc153c840322986d9aa638adb76bde00

  • SSDEEP

    6144:vYa6/R1eJ3wqRfASXw2x38QMy5ngizaBpAz0XPZs0wyYScC+1tyw:vYtsgqRLXZ8QMy5n+BO0XPZTwHScC7w

  Score

  10^/10

  formbookk04sratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2