Extracted

• • Target

    Re,best offer.exe

  • Size

    973KB

  • MD5

    c7f79795432fc3467aadeb0f6f736d1f

  • SHA1

    3deaba5114fc244750f4af2fd6b218f96bdb5cf3

  • SHA256

    bd29947fc88d96b3f5b2982d67f1d5df99aad570ce86b87ed91103b8f43c3b8f

  • SHA512

    f46283bd9dc71b44c7a094f151319a03f30e9b503dfc5ef02855ccedcd1cacd8e1f110daa73f83c9218be1152a2e42826861ab18253b6d7b8b771ea86c723702

  • SSDEEP

    12288:/C1WbZckSD73Kobulml54p+1MesAMrxIIQpZ1R8j5B/UFDFy8V4eAwRXIbUDbLDZ:/C1pzyl9IHpDRmxJ8Se9IbUDHDlx

  Score

  10^/10

  formbookng04ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2