Extracted

• • Target

    komut onayı.exe

  • Size

    309KB

  • MD5

    b39a94908d4fe100dc9187de974a365c

  • SHA1

    6882de6ac7ac89779fc9bd59c0f4499b5aa43e71

  • SHA256

    68e6d2750f1617386ddf6ad75b2d03e1b6522e64fd7da365235e7041faa60dbe

  • SHA512

    e5e1c8331c598ae99b732d79188b91b2116ea4e13fe239c83755269c29fe272ccecade3ba0cc4e5e0f97a1427ab45c70db8d9366fb1775041ad8fd4e485ac3fc

  • SSDEEP

    6144:pXFKo5lJFjoGeThVuSqdEcimyOGNIm0DLJpg2KvkgcOFM6Te:pXRJ+vuPdEcsIm4LRwk92e

  Score

  10^/10

  formbookdz01ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2