Extracted

• • Target

    3871c9aa58db2100844c431349b9cae3

  • Size

    1.2MB

  • MD5

    3871c9aa58db2100844c431349b9cae3

  • SHA1

    893fea4babe2e1c194643001fb5f4dedc85114eb

  • SHA256

    2b861b2dcb49af177cd924d2e4768c526afc621d3a85b14c0810985f6eef9f41

  • SHA512

    ca210fcd76813faef27faf2b7fee7047b50ad91bdae9dd25ec1ac2011d61733c271b620ad83e9e51c690514806984a897d340d5062beb1230ad3adee8d943645

  • SSDEEP

    24576:3YRTCmGFoOsBgo0q4wMeBcJDtPXxpF8d:39FpoHMeBm1Xq

  Score

  10^/10

  formbookbcakratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • CustAttr .NET packer

    Detects CustAttr .NET packer in memory.

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2