Extracted

• • Target

    9867dc4c4aad89a47aa9fcdc726b5296dac1a3150520140e6d7da4836448d970

  • Size

    968KB

  • MD5

    31b4c9a8410d02e19dfd38ac81944b90

  • SHA1

    3196a4fa70bae053fa9c4aabb34eef6d6c8d1516

  • SHA256

    9867dc4c4aad89a47aa9fcdc726b5296dac1a3150520140e6d7da4836448d970

  • SHA512

    8b15ecce9f6efb4c22a34cf4d0b58b2da3b25f73e3ec0794959c111582902f1386de73eb01bc84ae83fdee195600f1f5363a4e711e230dcd8fa11acd07a0c541

  • SSDEEP

    24576:ddeb8P0iW3NMWVp+0w1Nj2dglxwmEgwF96fk:rP0iAiWP+0wDggsmEgmqk

  Score

  10^/10

  formbookgg04ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2