Extracted

• • Target
    b559f853c534c533f75d09966aec1a81.exe
  • Size 361KB
  • SHA256 ad5097f981c366a853537cc8a7d745da73615e051c523b92f6ca7dcb80ea82b7
  • MD5 b559f853c534c533f75d09966aec1a81
  • SHA1 3822223b422b6b0fbe2c0441ca83eff06534aae8
  • SHA512 20bd0240ef2115bae36ec24284a4baf3f8f57d3d479ec40920bb22aa3606199b65c8c114846083bad189d432fcbd733219460aba9ccf7e31ff73eb59ba5ecdd9
  • SSDEEP 6144:F8LxBsoenoyrZmqRtTAroFnjvAIQ7tCehB1pKo5apdHYtOSqM2o7YtENjBYK3C1:/oentn3TAAnbhQ7tCehBadpY4bPjtEN6
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbooksy22ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2