Extracted

• • Target

    594d99b2f426271d893550e00f7931e2b25ec0179e0e52887a77e3ade825b730.exe

  • Size

    1.1MB

  • MD5

    606756c712cb86af9ce0ec454fe92c99

  • SHA1

    7d5000c5d2a1b5b88039994db9dfa17941170c0c

  • SHA256

    594d99b2f426271d893550e00f7931e2b25ec0179e0e52887a77e3ade825b730

  • SHA512

    58354f340dc460275137fb25fd175e4cd52a4dcb40f750007a5ba5c68b13a2f5083a372210f5cfb80cd91c8700f425f7bdb37eecdc626b5feb829ecd43151ba3

  • SSDEEP

    24576:utb20pkaCqT5TBWgNQ7aK3ngGxIKLgh06A:bVg5tQ7ainPxIK35

  Score

  10^/10

  formbookbi05discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2