Extracted

• • Target

    PO__63537353636___IME JPEG.exe

  • Size

    247KB

  • MD5

    ea63eb54dfdd8f74262614563048a01b

  • SHA1

    7ea1cc47710b4c399fac4cb9152b42fed5ec7f59

  • SHA256

    3ffe776b0fc18193afce55f3502e1c895f7a10d3b01604f9953a1beb72be97fc

  • SHA512

    acd89deb5f8d3299c5801f67149bb5bb70a6388c9939d1bb1fb4bd3aeda5704afc9b85db7b2d993f59e14340ea74339f7d806f1ae885db3745aef2a5a9c4b5a2

  • SSDEEP

    6144:DQuqHcCDhh++6Cn6lun/ur4oCXQk4OvbqRK7P0+Ar7:kBHcCDhY1CGu/E4oCXQmzqRa0+s7

  Score

  10^/10

  formbooku2s7discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Suspicious use of SetThreadContext

  behavioral1behavioral2