Extracted

• • Target

    04413299.exe

  • Size

    255KB

  • MD5

    28a73f327157c5f56e666607b184de43

  • SHA1

    7d1e96ee1bbc229453fc30a15a8f2ebccfee4f12

  • SHA256

    f9454d0787965826c1f6e031eb78495f153453fca4efea4ed993dceb61f2e3d8

  • SHA512

    8935b1f159857d7b2c0726625bddb3905dfda552bd87bcdd7c2c7a13a68d099846e64b57cb89b087663b78bf0d296615a4351ff49467bdf9765b90eaed40eef2

  • SSDEEP

    6144:/Ya6IAxKmCd9OsUOOXk12w5LLMlaxBTNrZj:/YeAqnaMvZTNVj

  Score

  10^/10

  formbookj0c7ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2