Extracted

• • Target

    449b3fa96d0f05b8e8663fd8472d366d

  • Size

    1.2MB

  • MD5

    449b3fa96d0f05b8e8663fd8472d366d

  • SHA1

    40c2e2aca926851e0100816869d349597c0e7649

  • SHA256

    0a718870a86c1437e0299f0a1aaeb8f86dfe8af43e4ab56812ad127c56b876dd

  • SHA512

    8aca4dd5a5a4084d2eee490aa8456bfe50594e166bf6eccf27a1c7c0b8b60481bfa1a42217445e2b2c61ce52d3482b79c57aa21a30c8d0ee0b9480ed536e6b57

  • SSDEEP

    24576:lYHlCmmeOsBgo0q4wMugVZZOT+QorTkgzx:lVnoHMuY7UoPkgz

  Score

  10^/10

  formbookabnsratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • CustAttr .NET packer

    Detects CustAttr .NET packer in memory.

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2