Extracted

• • Target

    7485c7b439341ddefbc3a27c36fd79acd5bad67aed05e9ccdaf7689a6d71ab23.exe

  • Size

    700KB

  • MD5

    a9a37483725640f15287ebad5eddfabf

  • SHA1

    9f254db4527381e6496df48b5bf1c3f022cb704b

  • SHA256

    7485c7b439341ddefbc3a27c36fd79acd5bad67aed05e9ccdaf7689a6d71ab23

  • SHA512

    1334465075a31758c44ddcb2f61861214e6566d98a592711d860433b05112c510e25595c69afc9c8751614074a5e232391c2faff63ad88fbd93bea5c7b818cae

  • SSDEEP

    12288:SiBxGmRYmsyr7ZcO43JyvhimQ9f7dZb2JkaUE8T/gqGF/I9W:SiBx5YmVcO4ZyvhimQ9pZaJd8jSRIw

  Score

  10^/10

  discoveryformbookm25sratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2