Extracted

• • Target

    Ot7EdLwo881ajbV.exe

  • Size

    617KB

  • MD5

    f99cdd71043a75d4fe553fb39de6d3e5

  • SHA1

    28d123dd5f049724ec34cea59a73fb7385b3f904

  • SHA256

    356dd4d1abe930b8189e5d5a1870c6a70236a12db73b24c19d0e461056c15dfa

  • SHA512

    08cd7223a4019ed691c67e3c93fa7852842235108baaeb21e2ffb14426b0cfd35086ffb7542f675d863a937601f1f8cd1a11ca1f3ef908dd879e445dcee94956

  • SSDEEP

    12288:jfAcXkhMOoltiJ5i/6Ob/Bc1WsML0oORqYQb7Z4TwmlKfKPH1fG0Q4bXtk+yE:pkh5oDiJ5i/6ObZcpMnnYQvZo8fKdf/T

  Score

  10^/10

  discoveryformbookdr14ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2