Extracted

• • Target

    1a0757646caa77704f3d029fa9abbb2d6846d134f7b29eb87f4eaaea134a84f5

  • Size

    414KB

  • MD5

    dfdeda2af8f802749ea92a46f1a15eb0

  • SHA1

    1d4e20830f0059222251681524b8d04e2ef06b6c

  • SHA256

    1a0757646caa77704f3d029fa9abbb2d6846d134f7b29eb87f4eaaea134a84f5

  • SHA512

    207f6dd61ddbdeb216b5fe0385c406d4819475e99378930645bbd97add3832732b71a15fcfd80175478ad8d1b06234822699fc39a6fc5f6e06930a1e1393e114

  • SSDEEP

    6144:PBnxm/hZudIIuLpVS0GKkGhxi4Y9p8Q2GNpoWkzxVeQMXdipolitSnIFkAFWQ:LzdIZpQ0lk2x0KVzL8diClQq4kc

  Score

  10^/10

  formbookh3haratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Suspicious use of SetThreadContext

  behavioral1