Extracted

• • Target

    SecuriteInfo.com.Win32.PWSX-gen.3894.15937.exe

  • Size

    741KB

  • MD5

    0bc52d55c4cf2357b2f5a535141c39c4

  • SHA1

    df115cf05f84f41d1309fb35308f359200209286

  • SHA256

    df40a36c01c2a67d0343913950f8c79d0937dcb2e29d7fa4d12dba92128efc02

  • SHA512

    b0a71d513a27b35419110f3dc55c2f4f754c018e47214561152985ad918ff80c681ac94f23fc4f8ae48e4a75a06ceb4543d78e7f2980ae636e523ca13fc12128

  • SSDEEP

    12288:Z3zjLf30WH0TwOqp0c4yKJ0Gin+LwXZhJ0JxxboCsioM+h5oh8Bhat1hM:Zjj0ywkpLFKJ0CEpQJV3yjoOBhk

  Score

  10^/10

  formbookb31adiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2