Extracted

• • Target

    NEW PO - 24101.exe

  • Size

    1.1MB

  • MD5

    2101224c25b008724832b22df4b2f33f

  • SHA1

    1ab2163ad4933dfa6e9b7c9809bdd47f0d3f8ed1

  • SHA256

    ed3c955db72dc944a905068be7dc2c7668c4de73be2c5efe3307b16e60e901a3

  • SHA512

    c0d9f0a4294e06d25d7f94efe1ea82d4c98a2500abd1174d5979f97f8a0b01ac24a256d468b39609356a313521866942ba596012e34bc7f2b00dd7a8e6f77a3e

  • SSDEEP

    24576:ffmMv6Ckr7Mny5QLP9dGCLj5+F3kJnwahiA1:f3v+7/5QLP9dDLj5Q0VXh31

  Score

  10^/10

  formbookc24tdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2