Extracted

• • Target

    3cadb32dafeb421b94c09ca30944385141cbd4b032589b92bac948f27c287dfd.exe

  • Size

    591KB

  • MD5

    c9d5f9d20dd66ef3e2329b8a26f01af8

  • SHA1

    d28d94662a5e84ad0ae68f35979782fa3344304c

  • SHA256

    3cadb32dafeb421b94c09ca30944385141cbd4b032589b92bac948f27c287dfd

  • SHA512

    3d54cb4223610f8e15336101dc946a533f839ec6d0d55a8a4143a8e99bf4bf3f0e70aacad80a5dee62619f19bbda845e6a65b76f0d10ab5d52feac2bb32b7dd1

  • SSDEEP

    12288:luarYCFd6xuo/q3dk4vD7PDFoHBQKjX2q+hS1uv4S/LNApBxO:z81xTy3i4v/DFoHBTQh+uv4S/pApBxO

  Score

  10^/10

  formbookcr12ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2