Extracted

• • Target

    f5bb3d357a6f485f2b36cf079150bde0N.exe

  • Size

    719KB

  • MD5

    f5bb3d357a6f485f2b36cf079150bde0

  • SHA1

    df7b23cdbc7a1c76561d20a8558e0840ad8e4958

  • SHA256

    82d36fc137faf68ae538b06daa0ad94b716a272728a3d923b0d0bc1d55d318d1

  • SHA512

    88ce6499a42df4dbaeb276b78552aae1d184937b542f6006d3d0e79b80a35e34910836e44020dddcbd1eae57170c58b53337695c206fb0158bb449b32dbd9213

  • SSDEEP

    12288:uHiMd6OdKEari+OnGUCjt1QZ4ezd/UP1CXRL8vosTPBvPNBBD8ycnbuIC:uHH6h1OpGUA7ezd/KCBLQosTNnB3cnbu

  Score

  10^/10

  formbookd16hdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2