Extracted

• • Target

    TRF_USD 23,480.25.exe

  • Size

    242KB

  • MD5

    7839c9d8c615fed9d0c94ad49412b684

  • SHA1

    ae4eb463d856711a18065d6a44b7a8eb8f1a0132

  • SHA256

    c7a97adeda6255f93fc115edfd254b5224deedb177a6100354ac6226ad42b9f2

  • SHA512

    7e56651130a706b8923fd9d89e16740d214031d6291d93d2217222f3572db19b04c69c2ab3fc4bb2e395ede612bce6accc42e155123375edab3abd42918e46ab

  • SSDEEP

    6144:/Ya6HcIbHBu8wA9lQVnM8q/8kVlzoU5I0li7eUezHCcJE9Sn:/YtDr48wAbQVnQL7JSkAeUeLC50

  Score

  10^/10

  formbooksn26ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2