Extracted

• • Target

    tmp

  • Size

    303KB

  • MD5

    90f56eefb533c21d5a62577184244aa9

  • SHA1

    bab21f9682bb038b175a87f9c50026acffbf5150

  • SHA256

    180fce98cac3dd64109fcf09745194ced61a15c25ff1e698754105dde6586a58

  • SHA512

    150c6d771df9ef95a2111186e7e4dd35d403b9d437d8975e92ac6c5016114dbb1810d6894efd9655c6f34ebfb1656540cbacd491663006c091937c86aed11a34

  • SSDEEP

    6144:pXFKo5l8qf7SO9mj/WYpA2X+wIsT6P3rTwOiNxiM9orMhccGEV60:pXRlYjfRITPb0OqowSSM0

  Score

  10^/10

  formbooksy22ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2