Extracted

• • Target

    2.exe

  • Size

    26KB

  • MD5

    f56fa841f1e1bf4b7a607a8e2fc5ae22

  • SHA1

    776fa68f0a1423a3d357c5af61e44f19b7e028ea

  • SHA256

    5a0cf9e038ccec4e878a683c917c93d28a9aa301d478711b01c199e9fb14aa30

  • SHA512

    8bc684c6de769b48e18942585ca3ad4946223122b42dcc6f032ed77f7204280b456c8cee2cf8ea6de91a0be0b16d621ca06e555cb10411d3ac1e59011f76b292

  • SSDEEP

    768:EAs8m2LjndUuHMFSlWXokQPhbOcjC49N0Z:jsP2LjndUuHMgIXokQPgcjC49No

  Score

  10^/10

  discoveryformbookrn94ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2