Extracted

• • Target

    b1f7d45bb000c3201af5c92b009519206fd4bd83b568f0d360b8603520dc5334.exe

  • Size

    633KB

  • MD5

    04aad3880cdd785ac57270d136b4ae5d

  • SHA1

    889ee3a18eb2e035668acc707cff787fea501734

  • SHA256

    b1f7d45bb000c3201af5c92b009519206fd4bd83b568f0d360b8603520dc5334

  • SHA512

    1e0b7f42b820a6cbfabfe9e0e7aa63787e7286bf94308df47dc4f049b424347507b4744d89d0d1cb5ce5f60fc59ea1661f597e3b89290786cc30c9fb1b2dd5a4

  • SSDEEP

    12288:WUFzK9EHj+5YySzHAOZiUUt70/5FUNcLz5LqR3CF/m4fkn:ZzK9EHjuYySzgOBSQLUNcpelCQckn

  Score

  10^/10

  formbookps15discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2