Extracted

• • Target

    EDG9502024072.exe

  • Size

    1.0MB

  • MD5

    4472308b26d97576bda38ee8976036af

  • SHA1

    69f68ae82ffa3d8804aed31ce151efb26a74a8c1

  • SHA256

    7d58c8bd03c166d6a74bcec471538b4803d1ca9aa9d32f5a5286dd5aafea62ce

  • SHA512

    fdaf2e5c1aa93e67798fe99725cac4da3898be74e76eb22440b6bcce6ab064fcd73f1a25581f0ca4ae16e9f527927f661ad18dd5ef27d3fa0f4a2c9799befa32

  • SSDEEP

    24576:Ftb20pkaCqT5TBWgNQ7aIsWLhU/b5bTj6A:2Vg5tQ7aI7hS5

  Score

  10^/10

  formbookbi05discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2