Extracted

• • Target
    formbook.exe
  • Size 650KB
  • SHA256 8abe9e652522b04474493b15bb017c89b5f295000d363fd94b0961874fc1c4dd
  • MD5 bc1b1f3d1f8ffb3494f9d5b74c0294fd
  • SHA1 2672f5d8f475dde1dbc00c45e65a46bbf6d18deb
  • SHA512 5b360d0d99789f8599bac42130f62d491be7ccfa7d88a7cd1388c634e769c62f1296950e5f8fdce98d1588bb4a6946e1f77a5d1a1b1a7d4be23883d15d2b3060
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2