Extracted

• • Target

    PO__63537353636___IME JPEG.exe

  • Size

    242KB

  • MD5

    9e401b1980973e79bc19c1e3ffe174bc

  • SHA1

    ee948ec25692949114b3cd2c10d48d17dd2c6ad9

  • SHA256

    9d192f8239db65d0e6cbc8e080b2177e237f93cfd8b4a4065bf709ed3b69ac47

  • SHA512

    843fb44ba636367a8f7fbf8ade609ac61103769c1850580ec6bea2f01862be54451d0cc3c6e3f4f6dabc6d02c334ae92c69f3d0c6dd0e43c051c3a418fa0f300

  • SSDEEP

    6144:93vpQ10lPSHF3riXXNYgTdQDWThv2qwMHtkTXR2i+P9+ZA:FLEAvWutkTBvQ+ZA

  Score

  10^/10

  formbooku2s7discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Suspicious use of SetThreadContext

  behavioral1behavioral2