Extracted

• • Target

    6ec0c1af929d468390638567352ac6ca1d56b3732ff159ccd043ffbd9d57721a.exe

  • Size

    780KB

  • MD5

    a93f5a2c6e1278d1b8b93e8e9b950f26

  • SHA1

    5c3a7b41d017bcabf9d441d81c6c46a05b76d0f6

  • SHA256

    6ec0c1af929d468390638567352ac6ca1d56b3732ff159ccd043ffbd9d57721a

  • SHA512

    af0177762430bef805da4a751748607b3a637d852230692665ac455b12ac9c362912434221cc68d09e4b2a80b1b04eb5187285f9cda64354749b60ec600ca5ff

  • SSDEEP

    12288:WAv2iN9IcvSoun3A1fLsumo2Hv3hqWxGAT8dTTip5Q+:f1rAn3A1DsucjGJ9+

  Score

  10^/10

  formbooko5dfratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2