Extracted

• • Target

    6ce7f8a8cbb441eb6ea7b37a9f8039142f6586311cdc6c0518c1265ecb78318aN.exe

  • Size

    1.1MB

  • MD5

    5c64f75360a7535d0098e24852069970

  • SHA1

    462d562bf08435260c76d09b8d0e78c8c854f55f

  • SHA256

    6ce7f8a8cbb441eb6ea7b37a9f8039142f6586311cdc6c0518c1265ecb78318a

  • SHA512

    293ae523ddfae0e68729bcf363efee2bf29586e720bd715c5d15cafbc2d38b62c86a21873ee41157e3cfd065f2865db07aa61eae65e19e6b5d416793d76ea7e8

  • SSDEEP

    24576:ZqDEvCTbMWu7rQYlBQcBiT6rprG8aQTZ1IaWE1c4+vrcJ:ZTvC/MTQYxsWR7aQTZWE1c4Crc

  Score

  10^/10

  formbookat22discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2