Extracted

• • Target

    3ff3442c4098aed3f2b0c6cb52ecab522a028b18a9bcd1319a79b3dcff05de11.exe

  • Size

    813KB

  • MD5

    1cd16f3fa7973a96a8bd8185f10da1a3

  • SHA1

    2ca8e7705af44b14bd4805e12d0c64b787fdf7f1

  • SHA256

    3ff3442c4098aed3f2b0c6cb52ecab522a028b18a9bcd1319a79b3dcff05de11

  • SHA512

    87bb61ed46130cd7589cd154400bf45ea82eb57c92c3ffb5d163a69cf52de202602bea01f0a1518377d04499c728bd4ad5e02b1789625210dc304cfc7b142f33

  • SSDEEP

    12288:Q1pbZyY47t7pa5bNp0A9RTfYfZMa2yydQ8OQ6rgtkl0Ig95lvTHRyoY:qbKaxRIOa2S8J6080IgvpjRpY

  Score

  10^/10

  formbooks20gratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2