Extracted

• • Target

    cf8230d20fbd1b9b21058813669fcd7fa9575a5a0f9c38269213b4e712d918d3.exe

  • Size

    751KB

  • MD5

    707ef60d5af01741c9fe9c6c8d68a643

  • SHA1

    073c2b85bbd79c8c98694bc9f35fbe149bc0dd99

  • SHA256

    cf8230d20fbd1b9b21058813669fcd7fa9575a5a0f9c38269213b4e712d918d3

  • SHA512

    02fe54ac14693f7f7a1e9123ed48df7fa9aa56947ca6f1971e90454198fa1cc36f5a5fbe90ba1ff9703f3b1b7bce638d4973967f2e0c2781ea64d9b630d08787

  • SSDEEP

    12288:Yjx0FgKyM8az8HXMaSIGugFBQZINYBH1anm5FuQcol7e9wagdmEc:mx0FgKbZ8HXMaSIG/zNYBwnsFuQcoteo

  Score

  10^/10

  discoveryformbookcu29ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2