Extracted

• • Target
    proforma corregida.exe
  • Size 268KB
  • SHA256 6665e9becfbcd071f9d5f1e8635dba4801a354dfb0bee53f4efafecb6146bba6
  • MD5 2137e7178040f8ffa1decc904bacde30
  • SHA1 f1a3f5a04c969d465f8f96235a76838c1d783a5d
  • SHA512 ccd371c30a2e9d18c1d6a10b0e92374c1cb5031dee507133cdf31c3681755ad2699073e50f5fa4e341d937bef4754da3a256e5030bb97a7a02901a5f3fbfc44d
  • SSDEEP 6144:MEa0NItHwU2Z2FmI1bRK49dMxTG1QBLxk6kgsm87W1mbEz:XzZ2FB1dKcOxxBdJkgsmV17
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbooktc10ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2