Extracted

• • Target

    tmp

  • Size

    336KB

  • MD5

    15681ec7c2d52e2b37b90a0bd31f9607

  • SHA1

    f7e08a701b3ccd2e896ee88a21570e06d4f6c1e6

  • SHA256

    c275d87e329c16226557c0ff240d0e9503417f51da02f33a3dae9eb7bc089515

  • SHA512

    7408231f638d8bb0debdfe6de20eb271b2f8ab3021c03b74c41b26c0879453ca54e216c54c4acc4d0a1298e42744718136c95490af464e8fc35cc4fb7830bef6

  • SSDEEP

    6144:BnPdudwDsCj6NBJCKhAe4H3KoJlQHVKrIgq5mrfSkJDUhUvdja3S0SvKWBgAzl:BnPdwCjeBJCKhAZ+gffSk/ZwBKgAJ

  Score

  10^/10

  formbooksy22ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2