Extracted

• • Target

    fb9ff8cbde506cb2cfdb40e88fe3fd6877a2e9945a71f07c7252647271763e71.exe

  • Size

    840KB

  • MD5

    837fd128d246ccb07647515dd273f4f9

  • SHA1

    8fa22f3f426216aa7f1301d127582aa7434c9d4b

  • SHA256

    fb9ff8cbde506cb2cfdb40e88fe3fd6877a2e9945a71f07c7252647271763e71

  • SHA512

    19f668b337f08ce16e831fe811876edf632d9e5c06b3d311bd9c7057c480fbe3ba2fc1c9d446cba4b755d375dff7bdbcd80224223b79204ce7324de19fd665c1

  • SSDEEP

    12288:UZ/fiJLRc2evo2Ursov0KT4zHsyYgH/PT134slbbHl2qPVGNbTuMuKBD7hpvA/N:JAo/s7HsynTB4ATST0sDdIN

  Score

  10^/10

  formbooket2dratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1