Extracted

• • Target
    2.vexe
  • Size 431KB
  • SHA256 7cf9a8e9f9164be0f93bfb8810892a0dbaf5f7748105a8375afa3cc558f9d940
  • MD5 39f5517cde8252f68c878e5956071441
  • SHA1 336464c016ef58f9e82075754f200dbe59b593e4
  • SHA512 a9f6960f08dd58cdeb5323d8f5d7e12439de61b1f83877a916596a3acb72c6e2bfdf6865da623c9c7bec2996e02446d029ce7a53e2b35484be31468b477d97a4
  • SSDEEP 6144:kmdYfNunWu1IA2UcaYYeAJ3NSMv4DKj1EulrsbCwOI/4WJUsJw3Gp0Xm2YcHYeQm:PDWuqUc5ohNSA4s+uGz/Li2WXm2Yo
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookrztdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Uses the VBS compiler for execution

  • Suspicious use of SetThreadContext

  behavioral1behavioral2