Extracted

• • Target

    6155148c4e00c86359fd0cd7de903ed5631e68e2d6148cfcc88c914e4ed69a0a.exe

  • Size

    658KB

  • MD5

    76f39576733999c9850c86acdd8f73d5

  • SHA1

    1106ff36fe0aa76ec385621c78c67d1e022f0ab1

  • SHA256

    6155148c4e00c86359fd0cd7de903ed5631e68e2d6148cfcc88c914e4ed69a0a

  • SHA512

    d9db9fe8fba9e5c5bccc73af0a146ff680bbf72f962e1fd1597eca4daedce03ea4ec109fdbbf7accc8b3377bf4886a3108e6bfd0464f0d2e6a458402cf1d1c7d

  • SSDEEP

    12288:AX0px+V36Di8BtL5KuuPuTLkvt3jekIIaeUx2/xfGcJj:SBFKfyPuTiJj+IaeQPc1

  Score

  10^/10

  formbookcr12ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2