Extracted

• • Target

    aeMGQio1TJuPBzR.exe

  • Size

    665KB

  • MD5

    5ae74ac0fe21a6a624f680a5d9ea7959

  • SHA1

    c9121ba150a388a93078a5e5f51a9d46234ff418

  • SHA256

    cda350f17f9da84bd3c76f325656630c4724eeaa08949d9d99941859bf8f0315

  • SHA512

    27372957da07e97f756d8b1b2571b4b12592a67e3caf4a2152114d42bcd074164f770c8793f7fec8adc000b06db9637520ffa742e5947dafb9ac72950abd6c68

  • SSDEEP

    12288:2dfSRtdn2lq3PaiXoJT7VXktGsBb9x+2OvPk0EGHkRk6jpM:2wn2lq3yiaTxktGst9S2GHkRpjp

  Score

  10^/10

  formbooku1r9ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2