Extracted

• • Target

    file.exe

  • Size

    711KB

  • MD5

    edb164a751c9dd9defabe5b4912ffb12

  • SHA1

    d79237920e7447a87082f1bbab77ee54e704479e

  • SHA256

    bb2a13c3f2f32551b00c4173f0cb5baf28cdadf76e4e6b531885a162f7c310c6

  • SHA512

    889f4858b07a2ee35895119e261d98b4bdc862f35cc9aee6500a4465eb3df790693532370cee9ea349a3226cd250a65836a3336cf6c47888f5240130df9af7fb

  • SSDEEP

    12288:3p8XtgNO7LkxA22P4Qd9PbQ8BV5RdYH5cb0azdG9A2MatDX5FAMFfSm2cb54:ZePuA/ZJBlqaQaz89A2ttDX5tt

  Score

  10^/10

  formbookgd04discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2