Extracted

• • Target

    4E43EF75D5C98C17C569BF9EEE0C6128.exe

  • Size

    272KB

  • MD5

    4e43ef75d5c98c17c569bf9eee0c6128

  • SHA1

    460adbbe24ceb5e17ef28f32811975865fe0f9ac

  • SHA256

    314bb1d4fa16c81993064e89179f3027d2c7235c7f829111884c2beac761b353

  • SHA512

    2f7e6ac7ba97123871fa9afd604b2a40fda6abf76b03e6c67dc97e698db8956f141808286f348e870810cad505d9a40226e97e35fce113e185750118d6911c23

  • SSDEEP

    6144:PYa6sgzZPbTD9iKR539ZHLWcoi/tzKXvXz+DOYcus8djh11zXvif:PYKMZ/N/RacoMtzij+DOYb5hPqf

  Score

  10^/10

  formbookmh21ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2