Extracted

• • Target
    0c6f648fa11ad1a76e3dbfd5247781eb.exe
  • Size 726KB
  • SHA256 d22aed126e64e2ca691c2b8779d7e18f557de18757ba56e265608890960cd09e
  • MD5 0c6f648fa11ad1a76e3dbfd5247781eb
  • SHA1 ad9d45d26638a72a9aea328a3a187f1d3e75398d
  • SHA512 71601d2e2705c4e93fc0972aadae437ddf081de30b3226be4308328baa8958cf60b178a069ee1bd0d71a2cedefc81af21ac192f3ac5d32ab63e1892b2afff59b
  • SSDEEP 12288:6EylipphryJupzHvoAPYWffJtcfAxWkkwPw1gzs43BFjCfuXdm4SqFqIG:6WDhryJuJvxPPfhtcfAxgwTRXYaG
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookpe63ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2