Extracted

• • Target

    3afb7d99f94a14a215afb00a4cc6428179064599210e9702a945a47603fcd354

  • Size

    560KB

  • MD5

    5c794c5c9dc31717919c416ad8ec9972

  • SHA1

    f01cb1ddf551a481bedd398b819e9c0b15c34b2d

  • SHA256

    3afb7d99f94a14a215afb00a4cc6428179064599210e9702a945a47603fcd354

  • SHA512

    0a79dad3429166afecb2fdf20c2ee42890b659c5e9fad9e497e754e138fe9c8a2703d21112d5baee1143fc9edf2f05cb28fef51867bdf60afff8e9a5d432e833

  • SSDEEP

    12288:9PrVddddddddddddddddddddEddddddddddddddddddddddSdddddddddddddddJ:9DVddddddddddddddddddddEdddddddF

  Score

  10^/10

  formbookgblratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2