Extracted

• • Target

    Product Specifications xlsx.exe

  • Size

    254KB

  • MD5

    ac43233dd5fe6d55c112660dc700e564

  • SHA1

    2f431f411c707593f2f4bd67da5db2e9a9593778

  • SHA256

    d93182b7b2c8633aa7f379efdc80aa778ecc0b59a01929bb10a02cd8349354d2

  • SHA512

    a3fd81e3d3e4e7271ef1536e8f0c10c945780a916e168bd19bd67e03dd2a326b5910bf528220aa24ccd8799e02b50fbc30e953b3cde2c3d8a2c0dffd0278c770

  • SSDEEP

    6144:/Ya6lEiLxFG1cz5mqDoGPuduieEJE827qVkF28m4znusYtq4yC:/Y3EUxFzz57Dooudu9A5ko4zusYtFyC

  Score

  10^/10

  formbooksn26ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2