Extracted

• • Target

    a1ce25c899ff86db4e54d042569e0a996d399dcc9a701b551999b1edeb2acb89.exe

  • Size

    638KB

  • MD5

    b5c5bfa486e42a1f753a993f5fd4c850

  • SHA1

    a6e3226e45c448c599bcc694a81ff9dc5d7b05b3

  • SHA256

    a1ce25c899ff86db4e54d042569e0a996d399dcc9a701b551999b1edeb2acb89

  • SHA512

    fcae4141137f6ccb4210564a16d88c6ffa46addb6d83e435362141219374d7c22b3af2b8f6c9ceb0cbc8568348cb2cdaa1a3af40ab09188d6bb53b5de0338f33

  • SSDEEP

    12288:BhhwoIc0qIL6oPA6bBOcMLyNjYzRIvcjZoUMNA7MCoORaEZ/zy4KBX:BbwoIc0qIk6bBOJyN4pZNKA4sbdc

  Score

  10^/10

  formbookv15ndiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2