Extracted

• • Target

    4da4d8e83255158a09663b9da8faaecae3a0a9175571aee37567f224cb34e694.exe

  • Size

    687KB

  • MD5

    a2ec87198a2b44d6de329181c2550e59

  • SHA1

    fcde8f6052947da44d798d29011411b53fe6f62f

  • SHA256

    4da4d8e83255158a09663b9da8faaecae3a0a9175571aee37567f224cb34e694

  • SHA512

    f0c04730ce2b5097dfe904be5a66a61d7f8167fe54f16f197df1ac44fddfe4d19ff822f670da1683bb1b387140395c08a09ab711e4ccb829fde704cce4affaf3

  • SSDEEP

    12288:NbCbCwgqaVoumEOvJNYqOQnp/P/dtf0xSEy/q2FgFtWX5+lECs4mjl7gCMpd6N0t:NGC/qaSumdvJLxj0TI7Ct9JWl7gCMpMU

  Score

  10^/10

  formbookd16hdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2