Extracted

• • Target

    MalwareBazaar.10

  • Size

    653KB

  • MD5

    8691b9bda57b18592afe76b9a8265ad3

  • SHA1

    51c0b367762361da72cc2b36d317b188c9a51b59

  • SHA256

    a8af52f378b0d8cc71513411d4af5c383147c03064981084c63125b3f57b7f6a

  • SHA512

    56d80eae6b52800ebde89e6aecc2f40050dbabb82d65158f2a934bcfdc897f936f3293a557de689ce56a7223337ffa6d1b2bcee15af081c7203142d7e28563f6

  • SSDEEP

    12288:QI2iNeSY+aZrwrhWAqSruftYXDEt+FL+rXu8gLvCN2avJ5S:T14/4rhWAqSruftWFK9gLvCRR5

  Score

  10^/10

  formbookde94discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2