Extracted

• • Target
    ÖDEME HK.exe
  • Size 260KB
  • SHA256 c7f9898398688b651f9a776fac4ac4780b9432c5f369b403aaaebbc9fa5656a4
  • MD5 28450fa5342fc60c2c5df4cde423039c
  • SHA1 462dcbc1cdcf2631099aa2d947329b7287970b77
  • SHA512 3d8cddbc43a6bde178c188eb26f9c704b32578212d331bb5ed560b52d3ddb54abf72e33073aadc804b3f26ea7a24c3e96fbc606f9fec5f32ee7ecabc4d92b2b5
  • SSDEEP 3072:9lTSr+vbmJERzeF/3C1nKY20FVaRPefPVsz/YXUDSo2//X3mZld7jAPqx3JAcbMB:9kwNeVS1wcuSdX3ulxIr2twaRBuLHvCi
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbooktc10ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2