Extracted

• • Target

    808bc55dfd04bde28b5a81eeffa1be00N.exe

  • Size

    1.7MB

  • MD5

    808bc55dfd04bde28b5a81eeffa1be00

  • SHA1

    1ac47e1d51466f5031b1096d40816abb90d36668

  • SHA256

    1968771402227e2db604f63085104459de416107146f4d21a50c6e6e866f4324

  • SHA512

    e8b2d3e05adcb2da69780f1a4cea88c7f830d9d9d3a41abacc2cdf22b06ed5992a77a61e142c2622e210bd981fa20f710183aa2efa164b60d3c6aaed4f227c59

  • SSDEEP

    24576:0G/gSI7uzvdh53ATay0Lu9fE124K2Gzo/Xyhp4HtNLpTGLRvO4x:dgruLMayJWao/XC6B

  Score

  10^/10

  formbookdcn0discoveryratspywarestealertrojancredential_access

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Uses the VBS compiler for execution

  • Suspicious use of SetThreadContext

  behavioral1behavioral2