Extracted

• • Target

    2decfbf08f426be7ac5e3b7f9d15b487c1b37232e9aa194ae332a992243bec4f.exe

  • Size

    1.1MB

  • MD5

    1a34b1af5509c7b01d9fdc36fbef6464

  • SHA1

    e92acfbb76d82da1cd49fb7ee525d67c0582153e

  • SHA256

    2decfbf08f426be7ac5e3b7f9d15b487c1b37232e9aa194ae332a992243bec4f

  • SHA512

    f52f8300acfa03c2b8a9c7dbbc70d3671a1f83023fcba1eeee835b9b297a1516364be37d28d816fccd50a61af64461e4581d8558f3100635ef7c96c1e7226a84

  • SSDEEP

    24576:xqDEvCTbMWu7rQYlBQcBiT6rprG8aC2FQpv62aEe86BY5qid5:xTvC/MTQYxsWR7aC2qpvw8

  Score

  10^/10

  formbookm50kdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2