Extracted

• • Target

    d2ddd2a690b9ae6bc3698ff1dea0043c1c39d3edf33f908c213f24183070a227

  • Size

    414KB

  • MD5

    84dc0052c87e014ac98430cc8212861f

  • SHA1

    64e47eb33423129192e0779926e0e7bdd6ee95e9

  • SHA256

    d2ddd2a690b9ae6bc3698ff1dea0043c1c39d3edf33f908c213f24183070a227

  • SHA512

    cfa50180f6dcc4ade77766dab44988f0f94331f0ba61764f515423a2fbdc927ec51fd3f8e158e646e8993231f1e6deaa81bfd56b270638999ed52ef33a2d6391

  • SSDEEP

    6144:+EJ5HHF0GxXkBOteaMnY/qZ9XwfqQMhRvmi/xZEm/5JmUc7bNLYYnUuIHB:+4kEt1JiZBqqQapxZEUaUGpUp

  Score

  10^/10

  formbookubprpersistenceratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1