Extracted

• • Target

    62f75c04145584721209a0d160d0f6b374e6b9465a759aba8e3f6c89ae67938f

  • Size

    306KB

  • MD5

    372a40e50a902c3d708ad7879289f3b1

  • SHA1

    9a9de665d27033ff3846f209b19bd117852eed49

  • SHA256

    62f75c04145584721209a0d160d0f6b374e6b9465a759aba8e3f6c89ae67938f

  • SHA512

    893d3417b704ce328dcb7b62ae81c1bed674f6ec61fd4ff9499d4ecf1c328b5bb24f044d8ec1f6fe61ecfe6ce1862876917095fc61bdf37cd004930a6d4061bd

  • SSDEEP

    6144:rGiubhtTcC3GuulMvV1FhOWGkdLwIhLQZCuxC/rep5TuSpFfN:AnYCjulMvzOYLfQdp5TuSPfN

  Score

  10^/10

  formbookmg0tratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2