Extracted

• • Target

    eb8d43852d35402a95b03af87fd00923d73cb71ec9261861cbeb076e55884cab

  • Size

    634KB

  • MD5

    48abe47238a420102271452512a52059

  • SHA1

    3943eb1946282680ae050f59d68fd791bb1a2e1e

  • SHA256

    eb8d43852d35402a95b03af87fd00923d73cb71ec9261861cbeb076e55884cab

  • SHA512

    41b7a81c4cf3ca4489a143fb70f920c8fb834f4f2d82fce5d3d38207f61cbd80f2324d49f9a97e26cd2f96469114cfca82d8e00b82b097398d81ddf1ff9f2d58

  • SSDEEP

    12288:LQwi7K9diW8Goqrv6PemCaWmcnJpQVIzTgliZFLc2rI3g4CMw:0xidv6PpCajccREc2W

  Score

  10^/10

  formbook38gcratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Detects executables packed with SmartAssembly

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2