Extracted

• • Target

    85259a321d6b1d54bae58397546222f0cf4584467240f0cbcdb7445577b66510

  • Size

    286KB

  • MD5

    78a95a8cb18e37d6565520be5e8013c4

  • SHA1

    36557486465d9d133f2ea5aceaec9731f0663f91

  • SHA256

    85259a321d6b1d54bae58397546222f0cf4584467240f0cbcdb7445577b66510

  • SHA512

    7a811797afff6e82082296a10e5f3135340f126d1230bc15983737c0363c082b8bf7651d0732d85f89c5d08e13177fed789851c6402444c4dc794ee68d90be44

  • SSDEEP

    6144:AYa66rPn6SbiaFiPvZNU2tpErTwf4ceMXIECWoqgruCRnMti4oZQ:AYsrPn6Mia4PXU2tpswfx4WvCRwoZQ

  Score

  10^/10

  formbookbn26ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Suspicious use of SetThreadContext

  behavioral1