Extracted

• • Target

    afff63cf4baca4e2a5f58803754843aca7c75437c0cd7b0cb6b60efb72692fc9.exe

  • Size

    463KB

  • MD5

    c36113ac380951204651c549f3eab824

  • SHA1

    80cbd1c320ffb13cdc6139ff66ea28e2fb38e4e1

  • SHA256

    afff63cf4baca4e2a5f58803754843aca7c75437c0cd7b0cb6b60efb72692fc9

  • SHA512

    9124fafcf82946ff1b2273601099c9a3b0db0bc9be55e488fb1ca9420af5a1be5935e4ca24cb6347c7baa69235aaa0410264107a1121c7c6b6b6f121180abe45

  • SSDEEP

    12288:XYAEUfI55HxlJQ57Wl3ZmwZgE+YY0jV86:XYApkVQ5iJmwZg/0jV86

  Score

  10^/10

  formbooks27kratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2