Extracted

• • Target

    MalwareBazaar.0

  • Size

    760KB

  • MD5

    c9101fc66be35a3746ffea8e448c5119

  • SHA1

    453297f427c9c7a9b0e3a79fe4885d5d7c12af98

  • SHA256

    9022ec12d1c63779111d34993afd7aa58f7a7ed7087271c52f2300dee80c7f89

  • SHA512

    76efa88ad4a8d82b0b10abdc4dbb91db659e7ed4e9a9e4df6be8942f4235ad11ca27492907892da4cc82321be54056401b7caa1725a953784cab5bd1744bbdad

  • SSDEEP

    12288:ICc0CBN2iN/ougr+OAnK3Uv4ybDHpT4fN6AhDALgVWTsY/sQj14GB:ICc0CBN1F7tOcK3Uv4yB4dhcMgAAJ

  Score

  10^/10

  formbookdy13ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2