Extracted

• • Target

    18b8be474d7df6098362d403cd7b300ba947b149d745fc316bf90756a4877bbeN

  • Size

    1.5MB

  • MD5

    b940de1def8474541f887b550be00380

  • SHA1

    8758f6edbf3c1f83b92300c9c8536f4989d53eeb

  • SHA256

    18b8be474d7df6098362d403cd7b300ba947b149d745fc316bf90756a4877bbe

  • SHA512

    259c6abcdaf385cdc6107bda2bb01a7b4fc9729650ed2b91365ea666cb09c91e8fe54397a2c53237db11f7d02b1893553dbf23c1cbebaa4c3c17267537d44004

  • SSDEEP

    24576:JqDEvCTbMWu7rQYlBQcBiT6rprG8aT56HnRFAeI8rZNQVnjBRDI8k:JTvC/MTQYxsWR7aT5KFZNQVP

  Score

  10^/10

  formbookk94gdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2