Extracted

• • Target

    485ed47a38457e0c139e213688ee90ff

  • Size

    1.1MB

  • MD5

    485ed47a38457e0c139e213688ee90ff

  • SHA1

    531ef2ffca63a24fc727c8271cf0a5c17c1d0909

  • SHA256

    111a49310971b944f9b7d2c10b0f317658ea5778caa876c818679427f503f13a

  • SHA512

    1641cb48c5edc10ea29c9f8f5598a434ea5418da6799ea66b15b5d1113be72b31d3d040eeaa87c79c3f01f8c0093aa400a91d5d43b105d1edf5ba4e3f6d5492c

  • SSDEEP

    24576:OkYIwWHRU9/d31zOUK61VM9rbJTrNYJir9:OucOUK6XSFTrNYJQ9

  Score

  10^/10

  formbookbn89ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • CustAttr .NET packer

    Detects CustAttr .NET packer in memory.

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2