Extracted

• • Target

    SecuriteInfo.com.Trojan.PackedNET.3060.13386.332.exe

  • Size

    770KB

  • MD5

    13026754941320e654b4d10b8c7c37d4

  • SHA1

    0c355a2c24b09bd90e84bc58c842176d0b18569f

  • SHA256

    58cdcd2f49080d4471ffd169eb6cfe86f9efae01e45423492d0e31a4db510d60

  • SHA512

    77cc08168c0a860f56157a0926c7cee8bd18531a85869e38b1fb585e20b03e11c669a7d1a4cf002e7f06a46e8b47411c0393913e161cc05a4717db011b799279

  • SSDEEP

    12288:D8TRLrixlaIH2u8c2BBkWp/zYJCzFgxF5hB61ZRwbPHOAL6avHoj8jQm4OwgSUW:DMRyxlaIl+yUFghh2RwbW89jJ4DgVW

  Score

  10^/10

  formbookj62tdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2