Extracted

• • Target

    3e4d309ea6393d0740a3bd93c83b208ac59b3ddf2626bb279942ac48003454de.exe

  • Size

    770KB

  • MD5

    00f166485a5b7506eacbc8a738a2d395

  • SHA1

    6ef86605b307b98eadaf156856ec083d50a1165d

  • SHA256

    3e4d309ea6393d0740a3bd93c83b208ac59b3ddf2626bb279942ac48003454de

  • SHA512

    2cc89a97f5f45cc057f3ee603cc063e2aea8dad9f11f416dfad28f20d08b9cb6a2504d01c5fcfbf50de904290d5e82098065f8ddbe59eaac4c4f621481dac8af

  • SSDEEP

    12288:+sW1UoIG5MPUhlym+48U6f5sTvXeZkA76XYH9QLqgbfe23:OUobywl9+pUFOZkA+IH9Qnbf73

  Score

  10^/10

  formbookhe2adiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2