Extracted

• • Target

    c16321285091a58a2a0e63e4d445a71d6b9a60f27a6741c0a590a4bc5290d368.exe

  • Size

    645KB

  • MD5

    3bb3531506305dd04faae7578a83d44e

  • SHA1

    839a300e852e2148ad6e700caa3c8106cd237f17

  • SHA256

    c16321285091a58a2a0e63e4d445a71d6b9a60f27a6741c0a590a4bc5290d368

  • SHA512

    171cbe3416d66bdc62355d8830807697acb766837daeb6444c3f7959fe9730ebb1a1b6e266edb603fb1d4fd0f841b6fc085758bf29f58cf5f321beb8e6730941

  • SSDEEP

    12288:MAViwt5XHkAG46Oz3cjiG74gnS2QoywT7WmXyIp:xiw5NnjQ4kgKf

  Score

  10^/10

  formbookd16hdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2