Extracted

• • Target

    20184887cc360cee738b358dd896d315.exe

  • Size

    24KB

  • MD5

    20184887cc360cee738b358dd896d315

  • SHA1

    2e2cde781bef22778afe217ae92268b112e21196

  • SHA256

    55ca03b4f0a73d8c2fb54ded501c1b537d70cd7dd7b11bc6760d0180afcea5e3

  • SHA512

    c9e7b18872121a49908117f96a122b0ca420bef1fe6fa9701eeb8aebe872f97abf04396ae224acf8ec29b2bdc9e7bddfa7d72722df79f227eefff650d4a1da2a

  • SSDEEP

    384:9xg8LhcvtTqguhLZxKsNKdEPpcclXmFr0kA1GMIvP3wxffH:9xg8LSvt+lhLXKm5PGIXW5nW

  Score

  10^/10

  formbookbi62persistenceratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2