Extracted

• • Target

    47ea784b5aa582da550a12add7ccd74d.exe

  • Size

    588KB

  • MD5

    47ea784b5aa582da550a12add7ccd74d

  • SHA1

    5b6ae1d9193def3a895b102bc8340120bd5b8ea5

  • SHA256

    e3adb8e74cd21839185ef70b6430c229a34636536412afc08bfbf1b8a610b359

  • SHA512

    b4be253005f12497d76c320d14e3a9efc8632fe381baf6e1ff7aef6de5d4dc963fbfc83a944ce1f99939d3e7626ee0fb47d6b0687041d54b0b4e2e1ebd86306e

  • SSDEEP

    12288:12iNMyiRJU/WcGzm+ELUGomnz95ZaYXsWcB69OFv6GezldNxbfvoRRDEtBA:11FFe+tYGJnz95ZaYXmB6k6hBnxzgTDV

  Score

  10^/10

  formbooko5guratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2