Extracted

• • Target

    9cd09b682e79cb8b0c9f1ca85d75353d16ce58c530cac02cfbceb7116ce9b68c.exe

  • Size

    21KB

  • MD5

    5a63e2158e840e70b0a1a5d8cbc049df

  • SHA1

    71b3309f0f98671ee5db9eb2e9d05812a8540aae

  • SHA256

    9cd09b682e79cb8b0c9f1ca85d75353d16ce58c530cac02cfbceb7116ce9b68c

  • SHA512

    97e0d9cd057844f0c41a52f02c6553ebffa77056c1c992a6841602206d960b2bf11f63ca5cc074eb9a7112f905308a16add23233c5df90d3a8568094746dd91d

  • SSDEEP

    384:cs+2GqOOyQuluvnDS3d2dD03jVsV8ftnokwRwAoDNwAUPNtdI6+eQAozrBtHzkL5:cs+2G8ZQ+SXjWooPjBBAtHzae6eXw

  Score

  10^/10

  formbooko62sdiscoverypersistenceratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2