Extracted

• • Target
    f231a02d229e5f504eacc706629ae2f1.exe
  • Size 373KB
  • SHA256 a90acf50649ea6ac91c9aded346e47bd4a6fd2d8f3d3a9daf8c072ab6be99a95
  • MD5 f231a02d229e5f504eacc706629ae2f1
  • SHA1 d61fe356ad833c41dc6a229c129b4b4edd661db4
  • SHA512 679f3d57a8a8b864ca4e7f3df752bab625fe9bce384b3841cfaf5955bcce5532c92438492d764b96632e0571c244039d5d5ea6631f0f7fba0af8cca1029645f2
  • SSDEEP 6144:KfL+oq2XMMNbvqTSsiecdhg7hLrmr/QQBckCyxBfvip+M9oDGBvwDKKCQMu1u:KfLRrNbvq5ihg9K/yk3DasM6DGBvwDBG
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookt6tgratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2