Extracted

• • Target

    PI916810.exe

  • Size

    1.3MB

  • MD5

    dc96f5ae5ade3e42324fa9c34bc6a43d

  • SHA1

    4a882ad9ad5e3c18635c6bcebd829c7f5e4d503a

  • SHA256

    63cfb08a37c680b7bd8c3a16340a69f92e1837b9ec57104e1f826c675316e278

  • SHA512

    a397f4ee242077bb177eea07d195c5033c4e14c27484d5656a9cc525b5032d76e2509b5f16376bde4c30af9e65dc297dc94cce81f7ca47304e6644fc05bd29ca

  • SSDEEP

    24576:BAHnh+eWsN3skA4RV1Hom2KXFmIa69tlBWnMvZrcYqv89P5:Yh+ZkldoPK1Xa6/jWnwmYt

  Score

  10^/10

  formbookge07discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2