Extracted

• • Target

    ba6b404291eeee5e3a7f92f8debfd1af684035664d95fcfdb7ea8fef1b2da40e.exe

  • Size

    558KB

  • MD5

    3ec3e43514a9b55b88b069ee79ed81e1

  • SHA1

    43861900682dc4e550b0f215cb28553d368dbddc

  • SHA256

    ba6b404291eeee5e3a7f92f8debfd1af684035664d95fcfdb7ea8fef1b2da40e

  • SHA512

    09b63c828d5ed4cd9746d718e843944f121a840d3aa58763481868e6140b21246b52286c488e7e3df3d6a7c01860e6f5471f9bde796a2e66273c69412e7921a2

  • SSDEEP

    12288:ed6RGxHlehi2s5C+UViENXaTemfIgOe9Jl:ed9HEgrk+4TNXq2s

  Score

  10^/10

  formbookrn94discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2