Extracted

• • Target

    SKM-P2400260589107399.exe

  • Size

    1.0MB

  • MD5

    005d8596d55e4c87271ca9bc09cc222e

  • SHA1

    c61462e7f1b10b24f709e4806a12292914444d7b

  • SHA256

    210b1ec06e035d191a8ea49baee96196a97ac906c1c4f4b03e2db5d50649b36f

  • SHA512

    dc2116ba121610b6c9051650d3f223eb4e952f1f914652fc501c113110d4ceac34886691c7e325e1a35ea6f96197e4af9c1c33418c8c666b8b8d16b0756f284b

  • SSDEEP

    12288:JLkcoxg7v3qnC11ErwIhh0F4qwUgUny5QNJKRmvCWxBvamXu7waBtrZDiwVf2jsX:NfmMv6Ckr7Mny5QNJx8rZXusQabckT

  Score

  10^/10

  formbooke62sdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2