Extracted

• • Target

    SecuriteInfo.com.Win32.PWSX-gen.13520.16236.exe

  • Size

    721KB

  • MD5

    dfafc703ba16fa2dd6989169eea78527

  • SHA1

    80af23bb93aac46677909f7275d0afe05af2ed57

  • SHA256

    4c8efb2c7d2516b6253a3008e5f4dd5a0efb6b9752c76642491d9f6bfd9df6d9

  • SHA512

    5c60b5033df256b8e6627d1313e606435a74daeae8cd449131df6293ba2f12da1ef6358257165bc470f29fc8b6004dbe963131584ab17e73d1378f4faec7cb92

  • SSDEEP

    12288:lOJ67iJqP9XRz+5EJqOYu0iQVROhjuAZsKelXXex87+2LzBh3:lOJ67iJqPpRz+yJqK0bVwhjuBFex8i2P

  Score

  10^/10

  formbookhe2aratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2