Extracted

• • Target

    bbb4d62f2db865624777d1d4413cfa6aac6139ef783befcff575a640a31e3a56.exe

  • Size

    744KB

  • MD5

    1384621a58bb2eee81ab85037e86bc6e

  • SHA1

    39e88f220f0cef82fc217f2b9059ddd968f934f0

  • SHA256

    bbb4d62f2db865624777d1d4413cfa6aac6139ef783befcff575a640a31e3a56

  • SHA512

    88832afd6e659a5e4f579988397204eba6096f6c9813ca4e89fee4225d59323cc7ab9110e6be4d5aabb27ae8f824f69d060a19b809594ffb0f7a8728858914b4

  • SSDEEP

    12288:0qdBj0z1RA/J1UoIG5MPU0wOqp0KG2KU+ffyC52P1naCEDhhBkWYNQat5e1orLoW:5/3UobyTkpxGUbCYP1addhBkWYb/rLoB

  Score

  10^/10

  formbookd16hdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2