Extracted

• • Target

    e70447c828015246065108b80ee39088ae98a00561a1531ed0da79b9079f6617.exe

  • Size

    1.1MB

  • MD5

    acf8be68b18fe80b0812385f920b9a67

  • SHA1

    77b3d6ef5e56521f9819605617e36acb268cf0cb

  • SHA256

    e70447c828015246065108b80ee39088ae98a00561a1531ed0da79b9079f6617

  • SHA512

    71a28e5d74d6cfb94144919f289a71a62b692591e00b01f1713ba6f9ca07e1d97e77690408ce7c266d414b541a51b6836c2a19c4f56bef4661916cddc110598b

  • SSDEEP

    24576:0RmJkcoQricOIQxiZY1iaB0NgOMaUDfUb5eJikXO:RJZoQrbTFZY1iaB0NBMam+5d

  Score

  10^/10

  formbooknu01discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2