Extracted

• • Target

    SURRENDED HBL DMLU6312845110.exe

  • Size

    538KB

  • MD5

    f37c6c64a2c0f8ae8146b8503fc75e46

  • SHA1

    ffa637bc20372867f0b333a47ee016958cbf4f1e

  • SHA256

    1b0349902810cd568b25e28ae6b2706b241d1d7b7cd2bcde1d181a45dccda6cb

  • SHA512

    17f5257dee9930caeea5eb998b5fdddf12b0bc1ede3c43012519455ef9505efa38044a62e92dc9d2c42199562f44d6445de9cdcddc7e27f40475375c6525aa0c

  • SSDEEP

    12288:dE2SpmDj4kKcdcEebjRMiQCQjZwC6zfHyqwm14:dww4VIebjReCsZwfTHj14

  Score

  10^/10

  formbookpjd6discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2