Extracted

• • Target

    Employee performance.exe

  • Size

    1.1MB

  • MD5

    dca3f0ad0eaa9ed5eabfab13b8e5e72c

  • SHA1

    2db545db06211a8dd2317e9e08b5fdfc3431ca28

  • SHA256

    2f1f6bee630ceab483495b681e2468e018f6a9f2f28842d9ac7b40cf1e621f08

  • SHA512

    21b1e786096e88434320020c13eef11e18c73d8b2d115425e731391a28c15739f3d55532cf08cb5d53fe7c2e5dae58a016d3202aeb7362a45e8520ce1cb38e61

  • SSDEEP

    24576:KqDEvCTbMWu7rQYlBQcBiT6rprG8aw9tMmI3fHsDbo:KTvC/MTQYxsWR7aw9emI/2

  Score

  10^/10

  formbooklm31discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2