Extracted

• • Target

    e558835dc0c96c4b87ee68f5fda80ae3d64ab6285fa4795eb171c17d6d82cd4c

  • Size

    1.0MB

  • MD5

    db768384703a0ca55642ce5f116c8d96

  • SHA1

    ae8ee05d3b33fdd047bfb84e6b249b395bca80d5

  • SHA256

    e558835dc0c96c4b87ee68f5fda80ae3d64ab6285fa4795eb171c17d6d82cd4c

  • SHA512

    eda76970be224751ba45b04e6a34d82f12c7b1d2ce68ae67ce27f62e1a1cd3d0fadbb28f775c4ed6a258d673927ac3f7243bf925e5efc6cc01435870d1c4a6e3

  • SSDEEP

    12288:rLkcoxg7v3qnC11ErwIhh0F4qwUgUny5QL1vCEGTsJsVV8fJanV75T3Os/oj/vOM:ffmMv6Ckr7Mny5QLFCoanTisgv+GEoZ

  Score

  10^/10

  formbookrn94discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2