Extracted

• • Target

    06d709cf438f3fefe0ed7858278e77e1188422e2b4d59706f6c4759df1a5aafd.exe

  • Size

    674KB

  • MD5

    dad35c7d363f5ebf873d3e8927b3d3bb

  • SHA1

    b7f3d564a9e59d8cf0e128d9b061de9609acabef

  • SHA256

    06d709cf438f3fefe0ed7858278e77e1188422e2b4d59706f6c4759df1a5aafd

  • SHA512

    dbb1dc9d04911786be32a7e773304f7aaa45672a99f866752890bdd22304f688ed95ea625c61b25901dfd23518d0ea4e90badf2b169b415ad94467532eb0a248

  • SSDEEP

    12288:XiKBMaCaRD7Sh0TPo7Eyv2qbEky9/FrveiOMGUSl8UKThcWj5OzRBaGpIpD:JManRW0Tg7EyNbx6EqGGUw+Igb

  Score

  10^/10

  formbookc89pdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2