Extracted

• • Target

    eb1a15adea4a24e6370ba52b2a47d2e671c642375709d38976b48affd7aa37bd

  • Size

    764KB

  • MD5

    e13e7a494d841fa3de87bdefebe5f935

  • SHA1

    83475768f36be93a8df4982f68038dcaa7ea0e22

  • SHA256

    eb1a15adea4a24e6370ba52b2a47d2e671c642375709d38976b48affd7aa37bd

  • SHA512

    20ab569f95a5a8c242b244274a31d44cde63dc01a641b038622263beedd8fe44a9b09b3614dfc50dd924317d29680a32119caf0c9e4b1aab0bc76b9924816fde

  • SSDEEP

    12288:mrjm59qCy0agz6hGNffTYcJCs01HPAJVSFa74G1sEfNdYTb7vqQF0srNu4lXjAmB:um5Fy0ae3TYcUSJVSF+4GqEfNdY/

  Score

  10^/10

  formbook2bgratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2