Extracted

• • Target

    NEAS.SwiftTTCopyexe_JC.exe

  • Size

    303KB

  • MD5

    32a789f533962a3b74537fe4648944ef

  • SHA1

    5bd15035cb0c90346112c1ceaa51ae3c1f7cb7af

  • SHA256

    b88b53db5c1fd0779cb7718630d7ac90f0ff81cfc7e8495bff1325743adeff65

  • SHA512

    b67347465d70050a3b8c69e7019ff470ada290f9c80419f0e05006bee985dc8d4fd2dcf0f5f58ed66ace32f6fe71f9ba486e9a7abe02c87d70cff344d4c54937

  • SSDEEP

    6144:pXFKo5lGhoBRQXvUv2K34mJgBNJGuOwIu/taVBrEFCfp9rJXoV6UzOLz3VcX+:pXRGhSv2OIP+w3/4VyopIc3LCX+

  Score

  10^/10

  formbooksn26ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2