Extracted

• • Target

    32a70d3b6c2a40554037f062ea3e768888ca7c4f05b7e2b1f66f4acb05a67aa7

  • Size

    367KB

  • MD5

    e4c1322e603225807fdc8da0bd5db805

  • SHA1

    7ed0070478a6a65a18971ca0364635212c128367

  • SHA256

    32a70d3b6c2a40554037f062ea3e768888ca7c4f05b7e2b1f66f4acb05a67aa7

  • SHA512

    f029fd65855e40546b397404118a225cc85a4f87324aabbb71c143dc4e2b4ce7075c54cbe55669ed5a726fcb21a3ee5ed59d35d81739c76dade80e871fef19bb

  • SSDEEP

    6144:FYa6SU4VIXmDSvMDe3m1mYb4ecR8dVu9ZOLbkuX7arnhCuyaiBQYOqL8IgtO6Dz:FYkU4VumWvMDe3m1me4ehi9ZADGrhCIx

  Score

  10^/10

  formbooknes8ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Suspicious use of SetThreadContext

  behavioral1