Extracted

• • Target

    2aa8ec244fd85957972c5dc5e2d05f8485e7b4becd16d68e4e0dfe5594ce7272.exe

  • Size

    918KB

  • MD5

    2d9132f8cb67c74e17b5c9a97d97d98b

  • SHA1

    e20c86b162d7a612b9b5b741c65bdd98261c86ef

  • SHA256

    2aa8ec244fd85957972c5dc5e2d05f8485e7b4becd16d68e4e0dfe5594ce7272

  • SHA512

    16193ecf9a1856e3b9b806037078f002ed7323ce90497cd0ed40c4194e6f0f69d4c956c32433da4412ea725d2c30b6248e618d988be63af40a98b552f2915ffd

  • SSDEEP

    12288:r0mTFhv5VQZ9WsgF91raePmsr55MGBoIaETRavD7R5GsYG2ucIBIjuei:r0m/x4xgF9hmDGdGSGVLff

  Score

  10^/10

  formbookna10discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2