Extracted

• • Target

    7c1c972f058bd07c1b40b438e02744508eebbc081ecedbf9a530fee20bce4475

  • Size

    465KB

  • MD5

    ea525b4bd2b17625c41dae5a5ace5443

  • SHA1

    f09a072f32cb7228ce218de73a54cbf1b9665476

  • SHA256

    7c1c972f058bd07c1b40b438e02744508eebbc081ecedbf9a530fee20bce4475

  • SHA512

    5ff381b1fec3027fe53b19f2f42af446482e5a60b04e8e6f64938d229a718d1d04153c0cb51ebe428add7821dde42c552568733b80fd848b5dddaf2e87675158

  • SSDEEP

    12288:4xqYGKTd2BX88USFRszOIHy6LrrIs8hkM1E:WqKTd25UKk5LrIw

  Score

  10^/10

  formbookh0gddiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2