Extracted

• • Target

    070989d8cda0d6a7c06bef08e202e65f

  • Size

    1.1MB

  • MD5

    070989d8cda0d6a7c06bef08e202e65f

  • SHA1

    55f401ece369ead31ab4bcddabd27dda579034fb

  • SHA256

    0900fb79f837569ff852f6ed371c42e4a4c7f4b39ca68913a53108cc86fb98b9

  • SHA512

    1fab3030e2f2ff05bc681a593c788e16201ce779baa2420c0d469cf1cbcdb9e46d916104890ccaf7a66d4b3f9693ed6e3550e38ce4486591b374a162156a98b0

  • SSDEEP

    24576:MhBmZH5/darK64JWe+fhD3noq5RZq/IL:MLKKK64Jkfh7noqXZ8

  Score

  10^/10

  formbookk2m6ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • CustAttr .NET packer

    Detects CustAttr .NET packer in memory.

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2