Extracted

• • Target

    fb.bin

  • Size

    181KB

  • MD5

    93918c623317234901e5846540f3a43d

  • SHA1

    a5b49aea492de5430b09fa6c1e07a43a28c92b9d

  • SHA256

    8b23c3ddd235c8708c47bf3eec883a6f8ec12656680648400cb4733d9a14e762

  • SHA512

    c85af20af3aaabc9dd0e7da5b6dabb923d02c29360b8edd9ce31199311b9723f59a5ba13cf344f5891f4a691f6759954de11c12c5005cc80a9eb87567c274153

  • SSDEEP

    3072:TDhzK7wjZWfpsOjxl47KVrK6IUxg2ELN/pP8tGzb4JHg:fhEwYNxy7erK6IUhCt2kzb4JH

  Score

  10^/10

  formbookga4discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2