Extracted

• • Target
    d5d72f46517a26b05a5427b0ab8c8264f88e0428cfaeff06f34e7a69ab3c0d3e.exe
  • Size 482KB
  • SHA256 d5d72f46517a26b05a5427b0ab8c8264f88e0428cfaeff06f34e7a69ab3c0d3e
  • MD5 14d3999a87bbc7e8aed41e0609fb1a98
  • SHA1 65de9d958d4a655c404984e87e6317667c03dad1
  • SHA512 fcaeee1bf54b91d9011f4d2170fa492ad2c164247942e628f96e10a7016b1a1e2e750b3104eeff1cf306ee77790aff1756c7ae4ff573d830d7accd597cbc060d
  • SSDEEP 12288:WYqJQ5JyKYCy/L1FOtzhanqzW9tHcxikrdsRvg:WYr5JyNCy/L1yNa2WbcdsO
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookoudrratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2