Extracted

• • Target
    audiodgse.exe
  • Size 360KB
  • SHA256 5a7df187972e8ac7ffd69cfd57e9ec4490a36b915cb8beaeee8cceac12ab76c8
  • MD5 d7bde041b821e3b3e6e3a71846cee9ef
  • SHA1 0868c522a21aa1392272959a98fffebb8204be90
  • SHA512 7ecff496ab62930371841c0b7835b0a6f5a9bfbdf3436962102bbfaf0f03e0d1a79f05d3322e1631dd0207c9958d2a983f9f5e6028cc26d1aa0ad0316837febc
  • SSDEEP 6144:RfL+oqnzcACJXXBqiAu5BFi2QBlrogjVUe3bgoso0+zTtiNbtAfvUk7RwFdVJRMz:RfLQwACl0Dr2QBlroYXLgosRSYN5+mFG
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbooksy22ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2