Extracted

• • Target

    bukron2.1.exe

  • Size

    1.7MB

  • MD5

    88d15a726fe470a2ce43830f72e0a54a

  • SHA1

    f89cc778c0e38eb023f925066c2dd918e0a594c9

  • SHA256

    a8770dcdc0b4dc16d1bbad2af585b6e03442054cc7064ecb474e8ce448ae4067

  • SHA512

    c5b6a963f1f5295ae57bf5eb43f0e22a04db81379af353cf43d196d7caa21db795d0282b203f1d1c8e012f9deba5b9d2b35355533e5a6bbf0a7e9a680d0d4d14

  • SSDEEP

    24576:xqDEvCTbMWu7rQYlBQcBiT6rprG8a3nbbxlYGMRVpeRENRb98LolWwk8Kn:xTvC/MTQYxsWR7a3bPYGMbp8iRbTpK

  Score

  10^/10

  formbookhwu6discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Blocklisted process makes network request

  • Suspicious use of SetThreadContext

  behavioral1behavioral2