Extracted

• • Target

    8a5d576d918ae6d8612aa516e909b93b.exe

  • Size

    1.0MB

  • MD5

    8a5d576d918ae6d8612aa516e909b93b

  • SHA1

    3c41a0550ec582cd692afcf8ef4517c55db7b52e

  • SHA256

    95eea6606746af642726f423f651e78b52dc8652033b9ca6439a95248df0fde2

  • SHA512

    cb210401a0487c6ee73147bad81718cc00f38b7e37a90e6fcb35ed1eeea7c33682b38e87fa2faeba4ece183c04e2e5ad0a2c11e6012bbef945a9bfa154082484

  • SSDEEP

    12288:Ecz2z7Aq9J2CL1RWFgh9/xxSxhBx8C3wntqBTi+XLYacJf+mDXttarruVBDUJvnH:EcaHAqeCJKgX/ax8C3wtkXLY9

  Score

  10^/10

  formbookvr84ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2