Extracted

• • Target
    shegro2.1.exe
  • Size 236KB
  • SHA256 2a8783a8fa5d2994fdce8d2bce2aeb59434d13534e9f13ccae8de38f72f0798f
  • MD5 fe7fb44408912cfcc134fece3697776b
  • SHA1 f4ba9fd0270bcd4ce6090e950cdeae5bd9880432
  • SHA512 f3848e8410fa82a497634f6888f19483cb6f65a7a16d1b85921d0d3e2e710c167b82dd27ab163cf83270a3bcc2cdeed7b6264c084c37b1a887e35c1b492f86db
  • SSDEEP 6144:PYa6erNOk21nYN/GQT/J/gUNF8vx+SdJmdMmitT:PYIJEYN/GiJ4GF8vx3dJmdZG
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbooksy18ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2