Extracted

• • Target

    66ee67315e480d95d46e6d84096a64fcb99038b565e74afba831487f9d75461f.exe

  • Size

    657KB

  • MD5

    7dafccdeec7edd03008679c553a61b1d

  • SHA1

    e5b325831d125d0e0fc0cd32d91b4dd98e37641e

  • SHA256

    66ee67315e480d95d46e6d84096a64fcb99038b565e74afba831487f9d75461f

  • SHA512

    45fe7624bbc15496f4ad823ce18da8bd836f03f282ec9b97dc03bea6700d89f70f86e033d2d27bbd914bd1282de5c7c2a48adede4e28861232eaa847ba9c268a

  • SSDEEP

    12288:B0qJXJTVBM95G83u1U/td1uGw4A606fX+bbZ24FAJ79VvMqs:B5hI9Q8+1yvEGw4ApA+VFAJfk

  Score

  10^/10

  formbookb31adiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2