Extracted

• • Target

    9863a72f993232869c986637a5971e08d9fbf0336dfd94ab0f2f546eb3a85475

  • Size

    666KB

  • MD5

    953c7cd35e6384520b3787ad8708caad

  • SHA1

    6bbacba6338565e573e9cf9f2b204971f526a367

  • SHA256

    9863a72f993232869c986637a5971e08d9fbf0336dfd94ab0f2f546eb3a85475

  • SHA512

    a0b0d53c43280a0c5172ba5b54bca7f52cbb6bb376f573a0d1708f1f940d91f77a771779ee8334da4c6aa415d1039dda2ac4af7f139d9f6c05be848aaddb3f1e

  • SSDEEP

    12288:wovmE2fgg+2lw7u5Onlw9jf3SCANRDuOPClErRxpDQOAS0O6DW1N:w5EE+4w7u5OlwdSjDuO6WrRxGtb0N

  Score

  10^/10

  formbookhy08discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2