Extracted

• • Target

    AB2hQJZ77ipdWem.exe

  • Size

    606KB

  • MD5

    f640126d8e76c2a343754ff0f41c1eef

  • SHA1

    b00e9297c74fe4847f4a0667d9cc4379409cb501

  • SHA256

    f9e519cd66cb6bed521306afb703672ef2ed9d82d8341398c4199be4523cad96

  • SHA512

    cd05b460ce74792dbc91891cc13ad888f894c05747907bce0dd79193a126e996e7efadfb7831aee0fd219f3ba92f55858cdf4dbfed876280585daedb92c20083

  • SSDEEP

    12288:1DrlAypLTnapSEkztfGLI70wWsrRJvHG5yCgMLCAUIKtT:PAyp/naSft+s70wfHvH3iCp9

  Score

  10^/10

  formbookv15nratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2