Extracted

• • Target

    1bae1fc3edbbaed09ab3b2b6f5c0ee9f72d280daaf42a7591ba54f98d4f715f3.exe

  • Size

    511KB

  • MD5

    e4fef91301f6634978b75edab2cfd836

  • SHA1

    c628c404594d13ef1bfc8df2a65c3d955bb47ca2

  • SHA256

    1bae1fc3edbbaed09ab3b2b6f5c0ee9f72d280daaf42a7591ba54f98d4f715f3

  • SHA512

    6a4e861e1b99a15c61e17c270f8dad8ed809aaadcae44bc4ac3cccfe2f863bb9a2334dc98a87654c19a4d91ae5ad62285d0be6f6f05e461a30eda7ce03f6c205

  • SSDEEP

    12288:JGk9RQVXaahBaUi2iNIYI864BI94c9Yr+tJXktSljSX:JtRQMahAUi1u/864u4cWit7gX

  Score

  10^/10

  formbookkzk9discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2