Extracted

• • Target

    3640c9b3dc4bc344424c63f9511b4ce997b08a4e67ddd55791c60b1875e19c7f.exe

  • Size

    1.1MB

  • MD5

    2dcf6ba3617009251149bf80ff92ae04

  • SHA1

    5e20666eeb55bc5125a73c61481b0999b1030b63

  • SHA256

    3640c9b3dc4bc344424c63f9511b4ce997b08a4e67ddd55791c60b1875e19c7f

  • SHA512

    502eee3c93e6daa4b65da5cd0ad4a3b2b93b6e05c7ed5a557151cdc9c5316c9bdb7395b01b46e5ec59793619bf5a0452c42efecb9fb8f6897653addfef8ed164

  • SSDEEP

    24576:YqDEvCTbMWu7rQYlBQcBiT6rprG8ac59xpJtvf:YTvC/MTQYxsWR7acDxpJZ

  Score

  10^/10

  formbookat22discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2