Extracted

• • Target

    PRE ALERT 160-483389647002.exe

  • Size

    1.0MB

  • MD5

    7d3690538c648f6f0e5c0403deab233f

  • SHA1

    35e06729a4982ef682a8f2b6b57b37adc1b7a376

  • SHA256

    36c2e9d3423587948ebc93899463684eb7de6a26a62f4e560211812253c72819

  • SHA512

    31585756e06c37139d188a96fa0b272e4a027c057ce9a55a592d852b8cfba809dfcc13c936dca595fce2a2d162c203f58a3b427a6616aec1f34a7faf032a95b1

  • SSDEEP

    12288:ULkcoxg7v3qnC11ErwIhh0F4qwUgUny5QNroF4LELQ8UUEvdpeOmL0pBnLvG:KfmMv6Ckr7Mny5Qtn2punPg0pB7G

  Score

  10^/10

  formbooke62sdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2