Extracted

• • Target

    28c3fe7155927cb7482afbe59c25193a1a34856caa296cec11f9a3404df33d7c.exe

  • Size

    656KB

  • MD5

    d3301e432e44d8714c204e76d4ae1dd7

  • SHA1

    5d27d9ab29f9bc918b3a0c6ff6e395f074f2f853

  • SHA256

    28c3fe7155927cb7482afbe59c25193a1a34856caa296cec11f9a3404df33d7c

  • SHA512

    259c3d3eb7e675f2c05174f64266fb951c292b5196b43959caccdd2af44ec5e6c1fbb3cd832371c3870db65d71688848d57aee67fcae9b5745a43c8cb5254e62

  • SSDEEP

    12288:ZtZ4s9CcqGzKXjogFrxgpNAf7L7cGR3YA8FMHrsoO0GLpbhegQVt:ZtZ43cd+XEO6G7LQGnRHrsd0Q1

  Score

  10^/10

  formbookbtrdratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2