Extracted

• • Target

    UPDATED SOA.exe

  • Size

    237KB

  • MD5

    d7dce4a617bf4fd2c8a461c8100d0875

  • SHA1

    db21cd510a5bb8953fdf63ad0785ba22ccc99403

  • SHA256

    fa3a477577604a91938f7650b04d3dfaa1d8ec12578d3bb2618817529c8b5797

  • SHA512

    0a4055c55a607de7f38df43c898a3e35de536707e5ac55680a74b531e08863477f759b40cbe522f373a86adc57fecc73f49a07d09265d71495c6d3b6553ab9fa

  • SSDEEP

    6144:vYa6fnp4hNwItFltkcQJ4+DGbO7tO23Ni3PmPZGra:vYVnp4HwItTtX1qOIEOxG+

  Score

  10^/10

  formbooks28yratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2