Extracted

• • Target

    SWIFT_804571426993002.exe

  • Size

    1.1MB

  • MD5

    9f56a7dff1a27bdb646e134a2f4f4b39

  • SHA1

    646d82f7506b588da73b3fa4aebda9455268015c

  • SHA256

    444c7700cea589c8eadd8a51a9253cc1889900faf0eef882fb31bff858e34350

  • SHA512

    b2c1b97a11aef36fc7c8cbd043b4da49f7c86742343c7da21ccecef63529917daba744b1e288b434fcdd4678a2def7564ea7dabae5ce1bd9b44fd324c323451c

  • SSDEEP

    24576:uRmJkcoQricOIQxiZY1iaC9mjoWLkFUU74HAy61:7JZoQrbTFZY1iaCFvU04HA1

  Score

  10^/10

  formbooke62sdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2