Extracted

• • Target

    49bae482a9eeeb1792f15f03abbc8e6454d6b7e9fd78dbf7f3081d8dbaa9d450.exe

  • Size

    1.1MB

  • MD5

    dd51ef4d9a4169038673c7f657f2f9c5

  • SHA1

    f7d28cf5ad8a036ab851f4f836159235fd22b60c

  • SHA256

    49bae482a9eeeb1792f15f03abbc8e6454d6b7e9fd78dbf7f3081d8dbaa9d450

  • SHA512

    827c4cb8eceaf42a18084741cc1f50dd593741c53015392863d5fc3dd3f301910bbf0a979909e36289b649b837aa35609994b3d21d40d2b58865ab8f7bc1c686

  • SSDEEP

    24576:2qDEvCTbMWu7rQYlBQcBiT6rprG8aojxwBfcZW//g50hU:2TvC/MTQYxsWR7ao+v4mh

  Score

  10^/10

  formbookpt46discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2