Extracted

• • Target

    SecuriteInfo.com.Win32.PWSX-gen.2409.15933.exe

  • Size

    618KB

  • MD5

    39ef5b03e636dfabb4ee99552257d100

  • SHA1

    22b3b48c35902bb7a95bfe49a0213d6a3113898e

  • SHA256

    0192232934b2f9ae2a37ac4c8188f70804acd4c6718c95a47710f49e2f9ae9b1

  • SHA512

    958030a35ecac93eaccc812df7e20e68446672e4f0c713dbbe6721a316b6bd49c1ba9304a8fe50ed16b7f59b2e27d4b84676e8ce68e3f1622385a91b88688b40

  • SSDEEP

    12288:oV/rD67+XIAw4WbKPnt4nPSjwf+EQsDdlXfbR+5yqemf+s0K:YD1IoWbKPnenswf+JsppbRCemWDK

  Score

  10^/10

  formbooku1r9ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2