Extracted

• • Target

    Transaction .exe

  • Size

    299KB

  • MD5

    5760c3d839f1444175bdd379c2cf7495

  • SHA1

    d365bc5d708a69d0992e16209ebe0533b41ff4c2

  • SHA256

    7da9294ba554d4c17ed9e4caac9836e303980814c7898b422ccde7a246ac26a5

  • SHA512

    24305a47196ab911e1b026b6da28007366c2b7d1156df7ff40f5f49fd5ea2d1297caa217f6e3167756e10ba4080b9150ea2b441cc5ab067746914f1284e541d3

  • SSDEEP

    6144:pXFKo5l67pu6bVkzrhYSAASLMWvgWF7DaHvOocNuZ:pXRS86b2z4OCGPiM

  Score

  10^/10

  formbooksn26ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2