Extracted

• • Target

    b4e6a4b502e40ac294cfe0f86f520314b3c4381b79baf65fc5fe5da03c8cb1edN.exe

  • Size

    1.1MB

  • MD5

    dfbd2a4af285c0ee341b78b5b3eac6e0

  • SHA1

    5af29dab1bf9765a516dd1fd1ced52646b7d788e

  • SHA256

    b4e6a4b502e40ac294cfe0f86f520314b3c4381b79baf65fc5fe5da03c8cb1ed

  • SHA512

    1e2f252310ab7e05664c7cce8d02fcdd94ca1853975d8e3b41d8d18880c7cdfe8e945156590988cec0c7b6c722dcba8e65a7fc2fd6796d07ba5ef7ef8afeb8a6

  • SSDEEP

    24576:uRmJkcoQricOIQxiZY1iaCAvpsYs0b+VXcZv:7JZoQrbTFZY1iaCATs02XW

  Score

  10^/10

  discoveryformbookjd21ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2