Extracted

• • Target

    8d4982f32dffdff70405b3185f7a3e6ca96c596663576ca85c1f8dae9352e3b3.exe

  • Size

    654KB

  • MD5

    5672cebe337b0692893b95b73f534c37

  • SHA1

    4f5927d48e797140ae87831e4ba2dcb6df172db7

  • SHA256

    8d4982f32dffdff70405b3185f7a3e6ca96c596663576ca85c1f8dae9352e3b3

  • SHA512

    285b168f7259f35e1fb5dfd41b21a6d6972447f0fe70252f80127866385abd89dd09add944c56627c3e412e4caed5785b327cc09da058dbad3fac5eff968fe16

  • SSDEEP

    12288:Gw6kSRPc/iXyDuHRVYUDD4xydC7jKr1xFkIduA1A9:169R0/iXc+RlYxydC78xFAG

  Score

  10^/10

  formbookd16hdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2