Extracted

• • Target
    DOC2022092856789098765560890.exe
  • Size 463KB
  • SHA256 5f3d522c2e8fb5fa25bee03bdd61f8b957935e4209849358d41f49c39fe82ddc
  • MD5 9fc5136c71809ca5116aa57f4ffc2f41
  • SHA1 ab592ed0edb886b9fb1cd2e8b90ef59b3f8d3d93
  • SHA512 2f4fc6cc58d14750e3220c2dfa49ac1587cc95e1386051e96b1b667f0b9715a90d581e85e33b8e99ecd8f7a8c0415844e1760d8ef592c2c00dee48d668c2f6ac
  • SSDEEP 6144:YbVNADxpXBOX/zDQbJlEwqgvw3kV1IPZIOPnjhda+:eNAvxOX/mJlzV1nOPnFd
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookc1noratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Blocklisted process makes network request

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Suspicious use of SetThreadContext

  behavioral1behavioral2