Extracted

• • Target

    74291.exe

  • Size

    638KB

  • MD5

    d4f369f573c973d833f5060c6b80e929

  • SHA1

    1ef7c6cf58b39dba64d282d701f5992acfae830e

  • SHA256

    79f878be696492904510496633fcdc7458f7b2e2efb373f7d097b2276a708e51

  • SHA512

    e57e29b18f75b94445fa732aac2c31a1d30bb2011442b2736073bdabd12949d057bcae7f340f6f26619e70e86cc95a099fca4cb3a654880c6189f30901e6cdae

  • SSDEEP

    12288:C2N8jiZ4zypIPEtPplTY6RhKuEX1n+sDUyHVCw0VkKL3QXtzx/yffqx:C2N8jiZ4zypIPEJTDE/X1n+iUy1Cwogo

  Score

  10^/10

  formbooka2e2ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2