Extracted

• • Target
    6df873769694ef3980e2e19d8c657e4d993938b9c9ee8912a95f83027f1a2ea0.exe
  • Size 731KB
  • SHA256 6df873769694ef3980e2e19d8c657e4d993938b9c9ee8912a95f83027f1a2ea0
  • MD5 27e700882d8c8b6e574a99a4deb36b07
  • SHA1 864e3c954966ef5b2d75fbf6ef7e23c8c465f637
  • SHA512 01594a5cbf4b69412e946a94a0952a73ed43cbfab9cff34e65316495df3cd7dcfddf12b13e14e1aaeb23e5d31d0aa8bfa61c53837f15b22093f7b8da8405b07d
  • SSDEEP 12288:/mx2cHss/S+PB45DDoSivV662cFRA54R/KEA9UMlDR+Gac42xtAq:ex2cHs6SqazivV6+zA54dlAeM1RP42np
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbooka19iratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2