Extracted

• • Target

    EJ9wbX3RFyX19aq.exe

  • Size

    617KB

  • MD5

    954d05f0c308722129f2e4a26554758b

  • SHA1

    01ad78f156adbf8ff6560f74ebcbed1f2ef06eed

  • SHA256

    30cf6019932ac33f1a53c417f1d562dd0ee0ef1588500962c6edafec3a340a32

  • SHA512

    fbe992522f152bed50c44ccbcd38a371a999fbf55b0d2222aaa1eba9649177ebe19e9c4455940bcbc15f81e4f1b999b3fbe4a31842954cbd1e4820c3566b540c

  • SSDEEP

    12288:FgMPFA1uqHYB2LgxAcMKa+9Z/BLomCss5WycZ7UtKoH99ZBzPV707kNnduHEBw7G:60FAMqHYB2LiA+ZlomSwyc9oH3ZBbmYp

  Score

  10^/10

  formbookcz30ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Suspicious use of SetThreadContext

  behavioral1behavioral2