Extracted

• • Target

    876fbd2b5fb59bfdb8b09e09a99d3ff92428eddbbfd096af61364af56de20f0c.exe

  • Size

    1.7MB

  • MD5

    c48b9c850349fc52638fbbc3d8b53b82

  • SHA1

    6ba84b40b2e045d5f24526e19232f90eaffb6a6a

  • SHA256

    876fbd2b5fb59bfdb8b09e09a99d3ff92428eddbbfd096af61364af56de20f0c

  • SHA512

    190c02b92340059ee4bab58bf8c74a90df0d93488da174ecc28511c77a41f4481acb2830cce516797f496bcf3da84191fc119ad1dddaaf71e872c6d7cf761657

  • SSDEEP

    24576:czL9Mn2HfaP6waDllLopDAOmHg9e5024n0wjn6PPtY:l2/aPkhlLopBmd024n0Yn6PPtY

  Score

  10^/10

  formbookhs94ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Blocklisted process makes network request

  • Suspicious use of SetThreadContext

  behavioral1behavioral2