Extracted

• • Target

    b5e3575e253ae6811203e02d42fda718a5655baec9545f839ceb4473e5de33bf.exe

  • Size

    745KB

  • MD5

    48353808819cf7a6d4557da32df96924

  • SHA1

    188dea1e06e75391cc42fafe84e16396cafae2c9

  • SHA256

    b5e3575e253ae6811203e02d42fda718a5655baec9545f839ceb4473e5de33bf

  • SHA512

    96995e1a500ecff32a36f646d4a5d328f7343a75a3b43a3f0d5a7a73d6769fd015e82bd7c5b47e079149c628e821e87906feb70f2a84d8c6e254649d7a27dbdc

  • SSDEEP

    12288:jBdwsj8LCTdPo7wQbVhc6DTmp2OKlsThMsL9fkFnS:fdj8Lai7/vRDTmYHIMzNS

  Score

  10^/10

  formbookm2x5ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2