Extracted

• • Target

    e008b0307e7470de4160b1d1294e9f80e705b6f60b6f52c1cb5f4e9870750de3.exe

  • Size

    26KB

  • MD5

    66ddac982a848a23964f67c681f398d2

  • SHA1

    0e45e7ad765db4a8adca06d55717c6d0086e07ff

  • SHA256

    e008b0307e7470de4160b1d1294e9f80e705b6f60b6f52c1cb5f4e9870750de3

  • SHA512

    d0e469d0e40cabbac2fbab2011ac80640feefddda72f5d4aaefd0e8a1771f0d41f8a13c0e8dfa7f21fb9de8f27192f4a39413b7255ab03843c4c828cb722df3f

  • SSDEEP

    768:JaVwrXpaWFEFVm3j+oYsqsztHogOeYyGaL0wz:MWEsztIgKy1L0u

  Score

  10^/10

  formbookbopidiscoverypersistenceratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2