Extracted

• • Target

    csbdnquus.exe

  • Size

    760KB

  • MD5

    c431847b601038a906219f4429c30bf4

  • SHA1

    2e31eb56b0bc1c655c8d86347398276067f0b15e

  • SHA256

    f51db63fe8be8e59e25e8363e5930309e9a9148925e583da18ea7e31bc9b0a96

  • SHA512

    84c19678c4be4a48c6759a396d93783143972ae0616ab23e6a9bb453c7ecd3c50d7fe0d3e1293e7146023cb4fc2767cbe75bd72ca51d2bb831d5ecb1c9e0104a

  • SSDEEP

    6144:/Bz+lXZtn35VWFiGP8XJD/HobegCAStpL+kmNw0Fq2ecTY668wC1:/sZt35Vy85jubwt5Ln0D3Y4wU

  Score

  10^/10

  formbook2curdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2