Extracted

• • Target

    ccc792e234a29204157d4833f4ca76b93328cdb9cb6f4830d1bd283934d49e45.exe

  • Size

    447KB

  • MD5

    601b2d6daefd3d2eca786e4d261a753c

  • SHA1

    3833e13c1f023af9cc7755b9e696a66c75bf03bb

  • SHA256

    ccc792e234a29204157d4833f4ca76b93328cdb9cb6f4830d1bd283934d49e45

  • SHA512

    4b4f93670380e9bbdc2d1d962db5fbc41531c2bff474a4a44b09ae665ba000b39a3ae6a0c6a4acda05c5d9f2f508342ad2293ba6c65de1178c77c231e7b1121a

  • SSDEEP

    12288:qX3f3jN2fyF88TTI5qa4fcujtyxE8fuDw2qcSo3:afxni8Y5GfbUxKw2co

  Score

  10^/10

  formbookqzxediscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Suspicious use of SetThreadContext

  behavioral1behavioral2