Extracted

• • Target
    siparis.exe
  • Size 262KB
  • SHA256 87cca4e4ba65094241bbb379ca3677932f6e399ece811334a07a72ff5b3073f8
  • MD5 24ef3b067bec6162316d28f1057f599c
  • SHA1 ca2b44d4a40573e98109d342e45bc527414217ed
  • SHA512 6caf391f700d57df9e834df26006f4d4c049b11a15cf50190441484b3efa6fc3a34e7f5bbf3e86864c2389bb5ddb4344d40eac6643635f8297595caa7006bba1
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookd23nratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2