Extracted

• • Target

    0d9b2efac64b4245292e7c3112ec8771.exe

  • Size

    761KB

  • MD5

    0d9b2efac64b4245292e7c3112ec8771

  • SHA1

    61b32ec6303fd7fa890dadc3f3f18128f2c264c9

  • SHA256

    5dc52da7b97835654bab2a3a39e93d412a50608bfd7dfccb87ff716c9aba6a37

  • SHA512

    47d00d1a6e705662d18fb3a9885af5a8a51ad3ef4ad3bbbcabf544e5b9a959dc49be99fdea562ff6db59981941db91de761d7f3dbf59ccaaa12a9a35357081ed

  • SSDEEP

    12288:QCZzLzeEILPryAzRVelrKhVaZF6NPeUDQ1cwCbGOaS80v2ekdeoFuPD7hXJGRTw:QCZzeEIrryORVep2QF6N/Q1bWGDTFmJT

  Score

  10^/10

  formbookar73ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2