Extracted

• • Target
    923b2cf57335ee5730c03f793b9b465a.exe
  • Size 352KB
  • SHA256 53bb0f293733cadbf6b5704cd0359b61acaa6367eb49268905714492d35ddf81
  • MD5 923b2cf57335ee5730c03f793b9b465a
  • SHA1 a27545f9f552769d83c2aa846d79cd1252ed7ca3
  • SHA512 b4dd59cd556535fed05ad51ad75472fa69cd03964a897bcc3179901dd5d452057b092d190292f3e4d7b5294a8b97ae42ecadc7ee4d26537fdc81b6dd5be1ba96
  • SSDEEP 6144:vYa6VB0R719FRWlAQR/P9Zpim8lMvGMsAzKDv4Wkm2wG+8p9rNvQr/zh/QCM9OF7:vYnyR71H4RsmaMvX+DAWkZMCVKzhC9It
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookm42ipersistenceratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Loads dropped DLL

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2