Extracted

• • Target
    a8fe32e805d1e0a0a61e2763308b01be24656f9bd356a863b174ce61e32d9a7e.exe
  • Size 561KB
  • SHA256 a8fe32e805d1e0a0a61e2763308b01be24656f9bd356a863b174ce61e32d9a7e
  • MD5 fff69b0890fc5c9c754e17d06deb5216
  • SHA1 e3b4644bd7f114a830ec649edbed92a437a81673
  • SHA512 a799abf32f8ede0cf805cff84961ded989b899ccfa44214ad17d4a9912ee650cac6f75b1462fbcc465b47397578eecb5f5998ee24c9694bfe2a7929549040088
  • SSDEEP 12288:DHch5SCsLxfmoaaKB0eN3lvGIW4CO7MEMVbQsJeo6Bcd0Xp4e:zIfQHNKB0e9luIybQKXLd0m
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookmc10ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2