Extracted

• • Target

    M5q4uWVi2hHJb5C.exe

  • Size

    673KB

  • MD5

    8f59922b722f3d9687be6fbe7560a62e

  • SHA1

    8fa58ece4679a1583f3f63ad1e7584ddae114e02

  • SHA256

    2cf38bc5d5c1fea2c057ec48c472636028f113bea556386f0cc8b785a3a21189

  • SHA512

    118ed74e6d2b0377d0d32366315b3fae260d6bdc5b10b1eaad6c8747a153844a1bec55bca194411e70db71251c5324aa69a0c5133e32cb1440107c5d9afb12e9

  • SSDEEP

    12288:8CxEd61QEWfBQYahsa5cJQAmaNzzePkzYa3Y2fTKQ+KWr:8CxcvfByhsa5+OKzzhZZ7L+pr

  Score

  10^/10

  formbookcz30ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Suspicious use of SetThreadContext

  behavioral1behavioral2