Extracted

• • Target

    761930655c92d23751075c7399bc4d384270fdeab881a8c486de0362a976b4d0.exe

  • Size

    759KB

  • MD5

    6341110aa0627431093ef3c502f65669

  • SHA1

    12dd6b363e9d841bce3fd0c007b1e84796909149

  • SHA256

    761930655c92d23751075c7399bc4d384270fdeab881a8c486de0362a976b4d0

  • SHA512

    2aee95c0f40f86f6c505cabeb2797aab5e587b3021c40156c2f5bff0ebc5d6787c5975a1978a4747a303e7cdba637498bac923a7e633931dd79b62feffaa8224

  • SSDEEP

    12288:IQ11UoIG5MPUNDguQL6/Vt+uIMtBLn6TnfymJVDgP5BhMW+:lUobySgu26t/IMt16OmJidMW+

  Score

  10^/10

  formbookhe2adiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2