Extracted

• • Target
    cfff2b043a6c98616a197315a813ca6d.exe
  • Size 272KB
  • SHA256 4a1e3a03026f57a6364b645bc8e05e1d7cc9d0fe8fe7ddbf6eb57ee4288fbb57
  • MD5 cfff2b043a6c98616a197315a813ca6d
  • SHA1 361749afe3423b3904f6ffb2432baa8ce7288642
  • SHA512 cefa2e030742605fad65ecba624946eaeaa70176ae8f809320bd9f31abb5159146734e67541eaf1a17651c059ccfc67accd89ba2dc6b9fdcbf6cf13351901da4
  • SSDEEP 6144:/Ya6UQW9kY0V1PypWp08lOSYzvseWjdGuOqaNSKOX:/YaQW9kYBpWm8lOSYjsBdGuUOX
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbooksy22ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2