Extracted

• • Target

    209f150e401442b5334c1d2c3084b8bf.exe

  • Size

    820KB

  • MD5

    209f150e401442b5334c1d2c3084b8bf

  • SHA1

    d5d15147a737b90805e6c07d34fb597c93c1ec27

  • SHA256

    56462c46e025fb1ddfe7793825dbde4130e9db4052b271f21b60069efeba96f6

  • SHA512

    c0d4590c6afb1f9abd926c907adc4daea606bcfad2615e8ae5f426e18cef0414254cfa257f44a3e7cd59f8681db7bdc0a6a4cc33af51e16814e7db9a1909d272

  • SSDEEP

    12288:QF+ciXyUwguIYoGVhj77o6lktulvWEBVr61jzfkg586aWHff:W+ZiUwCWpA6lYuVfjCXfB5O8f

  Score

  10^/10

  formbookdo25ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2