Extracted

• • Target

    c0b051308453a60c566ee546bd40d678

  • Size

    1.9MB

  • MD5

    c0b051308453a60c566ee546bd40d678

  • SHA1

    e45bda00001489ebf30d453c14c65b93a62e9ef8

  • SHA256

    c00166f0c14d96f9a406d3a92bfea82305a3ac513c4f710ab4184d7cba1c56ba

  • SHA512

    2f1a786269d0c5247de62c0a0d4d6e73ebb482da1acd3481bd4d544406a0b5cc13cd27b8c1b9dc901c1796ceba61b62509bd6454e965e9dc65cbb0d951d3735b

  • SSDEEP

    49152:assQNQNQEQJQEQJQNQpQEQJQNQNQEQyQ1QeFmghOfC6ExQNQvv:WccnWnWcsnWccnFi5FmCOa5cQ

  Score

  10^/10

  formbookcmsrratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2