Extracted

• • Target

    380c21fd37cafa3619196df7b6337783921656dbf58f1f54b63c74ad411421e0.exe

  • Size

    594KB

  • MD5

    34b8885c737fa78ecc68c1bf0628f8c0

  • SHA1

    32936d1bce243a085c81147f1d569a1c20c44bb2

  • SHA256

    380c21fd37cafa3619196df7b6337783921656dbf58f1f54b63c74ad411421e0

  • SHA512

    ed336237c0f5c038a1ffd2646b38c1d4cd6f4133e2be0f645f25a9e0b844c3f8f69aa6bcde18a072cc57da434006914ded57e2779084e0244dbbf44a3f193196

  • SSDEEP

    12288:zQ3yvK/bBMqQOa/71j+zmxnHJaA8YPGTU+aJczbxLedJJ4iav2hcll0WEm:+yqBMqQOiLnoYeyqzbxuv4im2hcT0fm

  Score

  10^/10

  formbookcr12ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2