Extracted

• • Target

    278f026aa1bdd7aa4ca87352d780e8c44b90cae8b23099091a0813d7eecf884e.exe

  • Size

    508KB

  • MD5

    770228bf699ddacf5895050acaf3b8a6

  • SHA1

    9b4dc19642f3a3df246a560bcc162ca2aa0e7924

  • SHA256

    278f026aa1bdd7aa4ca87352d780e8c44b90cae8b23099091a0813d7eecf884e

  • SHA512

    25f0eb14f78f550b6ad0e3c9d8615ac1916c1b8d9523c1365d8f878df23abc63d5200ba5db8ea39c826133fdf069c659db34ee35ed663613e3064b88852ac2a0

  • SSDEEP

    6144:PGxhLkIBFvSr+ea6m2RnQ0qkMUsAUll0KVL+RLqERzi0kxFWFm:+DPb16pTqgsAyeK+LqvOFm

  Score

  10^/10

  formbookmxwfdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2