Extracted

• • Target

    410f4617026b9c0bc7296999d4028a86

  • Size

    1.3MB

  • MD5

    410f4617026b9c0bc7296999d4028a86

  • SHA1

    6f558885e1901d89a067619c5e46e642fdd29a7c

  • SHA256

    c9c2270688cf2f657dc16c1399cfbebadb1ae1d9a14c575a8f0c9d4c1ee3f38d

  • SHA512

    09cb0893935fbd733f40d86fc76420cc7292758887e8f1e37e01eb032741bb94394158cdfda9ac7142c24f39c2c79ea405cd921f02d94f712eac623117c853d9

  • SSDEEP

    24576:2RS/d3NKzksGkszrBpGSDTZSK2Z/dgrBEvqQy8jhMN6ZNZZ:TKYlnTZSK2ZSS3CN6ZNZ

  Score

  10^/10

  formbookrh0sratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • CustAttr .NET packer

    Detects CustAttr .NET packer in memory.

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2