Extracted

• • Target

    re, lista de productos qu¡micos.exe

  • Size

    696KB

  • MD5

    65a7879d2875f36c8450555c6c98f293

  • SHA1

    1464a6da1bf0438544946aadde4a6254f2d2400b

  • SHA256

    2cb3478355fda005cf47b9c74d29944815892efe821a57b0974969939c106d09

  • SHA512

    874b289d769145908b92f74b374b1e4e3b86f56dfea3838f73845365b099c198a256c2c998446c03b94a713071070640b0b41a19a0969e37ed2f3d35b861533d

  • SSDEEP

    12288:Dtpgh/PsZ1DX/VDJDAaIkDQoriWWl/pe1CDxfLo1:Rpgh/PCAr0ORB+CD6

  Score

  10^/10

  formbookng04ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2behavioral3