Extracted

• • Target
    LL-STITCH-20230706.exe
  • Size 272KB
  • SHA256 a72b08c35805f2191b29d691f93f58eb33d1c827c2fb94029f3f5d760a1af950
  • MD5 aed115b5a242818468a8c251e71c17e7
  • SHA1 e5ed7622afe58cc6a8d5bb29148e7f0ff90dfe1c
  • SHA512 18a0f03440e74fa7380f109d97896d3d80617619241cb240d633cb6b8d6b14461c738d6ff3c1124413631a7f2c233e4bea7a0e9014471f9370d3d0321e59a1e8
  • SSDEEP 6144:/Ya6xS+3ApXqLbJUzzy1Dhownu2w7iRpLTLlfeQ+bEw6X5a8T:/YDpQwizzy1DhBn87CtwpbJ6X5ak
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookoe30ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2