Extracted

• • Target

    acb23b92beb1de31d7175c94f94854887bc0b2adb90faddc89bf1b14b1bd1a4b.exe

  • Size

    1.0MB

  • MD5

    e9e768aa357a7e34348c69e41444964d

  • SHA1

    4930b85e20b7967cf0afb1d9ae9ae57ca4d373c9

  • SHA256

    acb23b92beb1de31d7175c94f94854887bc0b2adb90faddc89bf1b14b1bd1a4b

  • SHA512

    6394564277e7077d9e326cc0f34f3c6ef945ed4d2e6bd812daaef879bb957edd4c8032df14774328799c692cbfb1f784fbf3580e65effdc5d2d42f124f62bb3a

  • SSDEEP

    12288:LKLRCoZzl+CN6XYt8GjKtzp422BxYLWM7Wi9h77:LiCoZzkg8tzpH2BK17L9h77

  Score

  10^/10

  formbookigbndiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2