Extracted

• • Target

    bfb4b96460ce25a3a585f3780f8ab6c0db4d31dccfe614491876332c028d4328.exe

  • Size

    586KB

  • MD5

    0d02d3493e4b372c0a1e3e9db2ea8577

  • SHA1

    5e4f4684b03d984611ddfbd2a28e6cdfadb731cd

  • SHA256

    bfb4b96460ce25a3a585f3780f8ab6c0db4d31dccfe614491876332c028d4328

  • SHA512

    036e517d4d0fc8aca476de0f96e33520a8ad6801a7294341aeb3b4fece87fe6e39707ba306205743f4ca8ad895c4ab8c42a7326fee0c36af5800d4e67b77d8fe

  • SSDEEP

    12288:h+MlmjxCKoK9oLK9YIzq3Z2EaWmPwe13zAVIEsX3BWqp4P:hKFCD+9YIzq3Zja5F138eU04P

  Score

  10^/10

  formbookcu29discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2