Extracted

• • Target

    6be70aa8b9e4772894bb7a4e03551de79d442a0263d8b327eb8c22d00f2b3e9f.exe

  • Size

    655KB

  • MD5

    b44db06ec43870ea515a278599d36a1e

  • SHA1

    00f455fc5f8010b38e47384d9e70d037c780aa98

  • SHA256

    6be70aa8b9e4772894bb7a4e03551de79d442a0263d8b327eb8c22d00f2b3e9f

  • SHA512

    1ae166f1c25564321950ab6ec477b0e147c7c9c4da0ce373e74300d18633fea6a3fb07232a6973432f60acdd53ba18e27572bfa659078379a815f474c9a78644

  • SSDEEP

    12288:gTKA5EajbKmxg2vBQHXbIDDzMrWXyZRVHPkNYf4ZAjcGJxaTOdWJIUuxbh:gTKA5EGISQ3b+DzMrXnVPk2f4Ajh3iJa

  Score

  10^/10

  formbookh0gddiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2