Extracted

• • Target

    NEAS.a1fddb00947565e465e8b8a04c21eff0.exe

  • Size

    471KB

  • MD5

    a1fddb00947565e465e8b8a04c21eff0

  • SHA1

    d9d76e6c80006eff3436c1a7be6c75eb352fecd4

  • SHA256

    bd70ea7d2a7e97435ffb39454f564f976843576e976e4f364b079580556f7171

  • SHA512

    5f3c8f03d941a3977c94670f796e481d890a7cfb25e950b558cb01b35a412791ab0fb7868e217f1645ffd7457b52deb964bf27f75b11a2507809097653edf337

  • SSDEEP

    6144:EXFKo5bWv1LkrtuHLgdwaY01sDlclnSmw9cPy0VgfHB7XkFocR/cc/F:EXPi1LgeLgdwauxcsnf0VWB7UFNh/F

  Score

  10^/10

  formbookbz24ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Blocklisted process makes network request

  • Suspicious use of SetThreadContext

  behavioral1behavioral2