Extracted

• • Target

    8mwXY7Lh2phgnOz.exe

  • Size

    603KB

  • MD5

    2e8e09c833fab65fc5a906818bfb7917

  • SHA1

    83ac7bb7826d28bc2c1d1a22ad3b0a58d29c0042

  • SHA256

    39641278c51c0559206d6d7c4f34c705e9ac56fb5f6073cef1c0c3818497783a

  • SHA512

    332825b6f4c6e0f3ab2de3db87aaf79239d826faeb41f0f1f3f11dec8af73d68803bed772c1b6ee5be7e94bdd12cabe6df0c6fff7fd14ce7f6d832bdf1fc0fec

  • SSDEEP

    12288:9VVjBXv/qJD4dQlsSQKbNJjBCeN5Me8cH36k9aA7GfVXuHeSsSLvd:p1viBKQjrJ1Ce78cH3H9aA7GUl

  Score

  10^/10

  discoveryformbookd16hratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2