Extracted

• • Target

    78e5df8594ba2ea6bf2b58ce0ed61080

  • Size

    912KB

  • MD5

    78e5df8594ba2ea6bf2b58ce0ed61080

  • SHA1

    2a5bea5ba7a417e7460bbaa45229a624146a4bd3

  • SHA256

    587a93ff0d5c705179a999e8d78014902a57ba119f45eb3c7c133eac8fa3c5ec

  • SHA512

    95fc76841831d7a0486efb7b2609684b5b6621da592e654b7c94f297e6c7448690f35f3b458f885739445bc4a48ff5d86e65ff9b82c8f59877827fe2c91fae61

  • SSDEEP

    24576:a7xtqZS/d33AE5+5+ziMUDbgkHmXeQZ2gqj:QxtqgL53itDbgkHZQZ2gqj

  Score

  10^/10

  formbookbcakratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • CustAttr .NET packer

    Detects CustAttr .NET packer in memory.

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2