Extracted

• • Target

    tmp

  • Size

    324KB

  • MD5

    fc22fadc862dd0a5b07210a9255025b0

  • SHA1

    bd32c5e6fc87066973379fc7c36309987c961870

  • SHA256

    92a11969793b832918bec3384ffadd4c626a7888d97454f4790529566d462022

  • SHA512

    672497fe32e4d05ab115211660c8456c3b6b89e61f17cfe4bdce573a428ab9cd8ce7c78a809c5c3a7d47e2e432bed58ab0e1ea11e6a3e94cb590aa3c9b4194ff

  • SSDEEP

    6144:unPdudwD6zVofFvpjjfou/W0P8GAj5KKF92pcnj564O+G4N1H84f3:unPd2xofFv5UuOKK/j56eG4/8e3

  Score

  10^/10

  formbooksy22ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2