Extracted

• • Target

    b5c54101374cc75a2e4b8960243fbccfe81c267d9e05af3b72e10b2fa812aff5.exe

  • Size

    1.1MB

  • MD5

    14876f2aecbf08493108d81f260bfe7a

  • SHA1

    ef0dfe01cecc9972141738f251a235059082b106

  • SHA256

    b5c54101374cc75a2e4b8960243fbccfe81c267d9e05af3b72e10b2fa812aff5

  • SHA512

    aff1f1d1dbc16059a895919a595902db67a59ea3eba46263defed3111a7fb0d3c241237c04a265c8045a6d52e313db6fdbc71ec01626bd30350210818820e774

  • SSDEEP

    24576:xqDEvCTbMWu7rQYlBQcBiT6rprG8af5sFc/sq97F:xTvC/MTQYxsWR7afSckQ7

  Score

  10^/10

  formbookjd21discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2