Extracted

• • Target

    18c262c08dce6a59267af49ac575ddd996ebd7b1d8bcfb31cff9f9f9814cfd91.exe

  • Size

    1.1MB

  • MD5

    a49be3b0ef3f7e35bfe33d328267e29d

  • SHA1

    a63ae2c4a8e49a762439613492515592a28ecc0f

  • SHA256

    18c262c08dce6a59267af49ac575ddd996ebd7b1d8bcfb31cff9f9f9814cfd91

  • SHA512

    9ba71fc6120dad3714c6db25c8efccd129059c4ee70cf89e8664ec13c92dfeb259bd8d591ac75618d221f29cd25ab8cb669a01be65a78df6d7f4f8761194b2d6

  • SSDEEP

    24576:uRmJkcoQricOIQxiZY1iaCbGV3eX2lsEO6qo:7JZoQrbTFZY1iaCS8X2Beo

  Score

  10^/10

  formbookk94gdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2