Extracted

• • Target

    85b4ae897dc9ddea04f18b19e97128479e9be1b25dc122643e644e1e77e271f5.exe

  • Size

    530KB

  • MD5

    41d167afce4833cfa5f6c91a2fb5ec78

  • SHA1

    dd01977c2b091482770fa2af3a7a867778c4b490

  • SHA256

    85b4ae897dc9ddea04f18b19e97128479e9be1b25dc122643e644e1e77e271f5

  • SHA512

    06cbc68126bf443fe01260e8fa76b6813e1d1ef03c0aff3c1699b67eadfb3fbf125bf083e3474614563f3f9c704a275060647f118cee5a79a8e67901b97ef731

  • SSDEEP

    6144:x6Uqd2GhNNLrM+qqpEu+VNlJ5xIjXDGwtwy/hkHa7wZjEHG85v0zLTgk46CKmqI4:IUi2iN53E15iDGwtwohw5V8x0+FD6e2

  Score

  10^/10

  formbooks2wtdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2