Extracted

• • Target

    54b4c3f832346a4279c888ad64c33632.exe

  • Size

    869KB

  • MD5

    54b4c3f832346a4279c888ad64c33632

  • SHA1

    0b37463437aedc6d202fdd9104c207d1b6b6e970

  • SHA256

    13b3e8cb037ad76af405c4c7d0d73aecd0041a2a0e4c977052ffeba0e843aebd

  • SHA512

    7e3af4770c01c22be4b4533514ed81c979cee73ea89bc4dc058c41620cc5522ec824791d82ba2ade56b1170e04e79fd027c21167c492ff7578f03810158b4fd5

  • SSDEEP

    12288:1Pf+mDXttarruVBDUJvnVhcJ+9saaGUau3FlrhiK3V2GpGLprSkKIvreKv+Xw5/a:V2a5fLrsmEaES4yKN/KpE79TNoimH80

  Score

  10^/10

  formbookvr84ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2