Extracted

• • Target

    086e659b1784ab08b4694bbb06483d4b54f966697cadffc2f15edceac440b7bc.exe

  • Size

    1.0MB

  • MD5

    4bf5f0c19903569f5dd85fd8067041ea

  • SHA1

    d467e870a79615ad465d2215ca5284e5cb07fbd7

  • SHA256

    086e659b1784ab08b4694bbb06483d4b54f966697cadffc2f15edceac440b7bc

  • SHA512

    310a4fc5c18526c679d21c7f64428a6bec1d3904f971d815370b8bd9e90c35caa268d478d006169b5a0baf7a1ecf94520feeec22f64e9d0b7b8423707d77d6a2

  • SSDEEP

    24576:tAHnh+eWsN3skA4RV1Hom2KXMmHaCdLtHgGbtYNHu5:Mh+ZkldoPK8YaCdGDk

  Score

  10^/10

  formbookph01discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2