Extracted

• • Target

    8c92b39496a1f938d9c16ad3e1a7948b48923fd028e23a422c5bf8f0b7e1138b.exe

  • Size

    689KB

  • MD5

    1965f06fb4c6e169c7014c90c5b93199

  • SHA1

    a8a949da0262c8165e52fd84276b0f299a86db2b

  • SHA256

    8c92b39496a1f938d9c16ad3e1a7948b48923fd028e23a422c5bf8f0b7e1138b

  • SHA512

    f00216c9c9b5051b432d939217dfd90ecf7e6f0373f48db018c9e9faa6b25a56db496a125a9a53ffd5660283db92d36a32671725b84652d3100d1e60d9dc2746

  • SSDEEP

    12288:z4UkfadvMq2bjiwAszlTRPipvBjxOqEEtMcLsfSbASQi8N0DjmEuv3/s0z3/rO:EUjVKmw5TZgkItMcLsfSbMqLwPb/r

  Score

  10^/10

  formbookd16hdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2