Extracted

• • Target

    MalwareBazaar.4

  • Size

    681KB

  • MD5

    8e9b751ecbb040e9893199329566c826

  • SHA1

    dee40b465783386a418bd5c4dc529b07659e1827

  • SHA256

    0b2881dffc8cd0c36764d955f9478964c95822672da0f5ba29a5af5c16059b16

  • SHA512

    71c59a006f0701427507261b6403c9a406f0193377bf8b6f473051e6461110438528656f3e6d6ffcc45da1eeb45629c20eff1d7938bfc01d915b8e9c09a00a3e

  • SSDEEP

    12288:BnMN4Np0xC0eQiLEX6e51HHZt12FhT0g5kklyEhxcN5GJohLTo:BMN4NpECrREX6e51ZGhT6kgEjcNwJo1

  Score

  10^/10

  formbookmc10ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2