Extracted

• • Target

    34f07c50351ceb404afb537378b0fd08f7345d378211fcbb5dc51430f5e2cbd9N.exe

  • Size

    664KB

  • MD5

    d300258dad4f6d26fb8e797865099680

  • SHA1

    ace32a1cfea8b72b78e45da6bcb3d8d31c92840e

  • SHA256

    34f07c50351ceb404afb537378b0fd08f7345d378211fcbb5dc51430f5e2cbd9

  • SHA512

    89da23e88502c23980c8d82c7f2a706744639db8b72fb08e1383064fcf32fd232a3dbd98890c63f6847f1df903859846f637527638b1b563bbc9ca6b96cc2e30

  • SSDEEP

    6144:xZbxSy0/npCK4nMRnLAp1xIEqL9vTQfSOJdN4kV7025pqWpSpY5+V/GhjEbx/JVk:LVSy0vp1c1ovv0dT0Bo5+Vuh6JfM

  Score

  10^/10

  formbookhe2adiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2