Extracted

• • Target

    SWIFT COPY.exe

  • Size

    1.1MB

  • MD5

    dd4c2c493ef0580e71c450fcb065cc3f

  • SHA1

    8fa3f5a33e0a6ba97aaa97de37536368f4b15ffa

  • SHA256

    d1255266817eb3bfb16b76ff97252b059cd857fffd048db4ded59a5eca0fa0a8

  • SHA512

    e9e63873f83287fc76c714b119765624f54530e44d9a65eaa015374572fe0cab8fdb74048b23f77ad2dcef0a00cb22b17a9f0d4609fa7981e98102ec0419ccca

  • SSDEEP

    24576:5RmJkcoQricOIQxiZY1iaX5l9P8KRXFx126MRXYhV7L9j2g:WJZoQrbTFZY1iaX3x8+xAKhN97

  Score

  10^/10

  formbooke62sdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2