Extracted

• • Target

    b1d6939bbb4a9f66306d13bd4b0cd7a59fbe69c451c3bd2df836a65c1114f70a

  • Size

    800KB

  • MD5

    ec39b68632b1c21cce891735808e5bad

  • SHA1

    367eb9ce7776adb301bdd27f51ac632e10184482

  • SHA256

    b1d6939bbb4a9f66306d13bd4b0cd7a59fbe69c451c3bd2df836a65c1114f70a

  • SHA512

    9bce138a8be3c9272c883e230eedbee66b8070c34ebe1c8c6dfe1bea1813fcd28800a95720fee10910a64eaa25b0b2b3cf24502b73ef4f88cd5e22aefa69794e

  • SSDEEP

    12288:ioAcuF6mn1DHLZnvJ15iOe42KMu/N3mWhQmwmJCMpU+ZPjyzggl9SoUNUEkN/m8V:giOV/NOa7Pjysg2pYTY9ozxwU8EJBKM

  Score

  10^/10

  formbookct45ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2