Extracted

• • Target

    docswiftusd.exe

  • Size

    581KB

  • MD5

    d05875c207283bd51f30e7976fdb5382

  • SHA1

    1bd4af46fd12de7cc7b949a0ddd238b4b247e3df

  • SHA256

    bc1c8cb700d5be15c306441325d0390344f846c226d720647d9f8d8e37f458db

  • SHA512

    1777eb9a79458ab0c1534a5030b103bf3586a4a470ed007612d1561b2f490f289a3ba2034bb7701c8bceb997d050fcba7b02b068a2fde310150f42ae1dcc6afc

  • SSDEEP

    12288:+ttzX+Uw0SuNKR0f8gr2q3CU2JElF0mn8P/sGIXzRkRL1ibJSy2kmu8:+ttzlSuNKR0f8gr2q3CLu7hnqzIXCR0M

  Score

  10^/10

  formbooksn26ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2