Extracted

• • Target

    win32.bin

  • Size

    1.4MB

  • MD5

    5da09caaae82f21d0eaca876d498ee03

  • SHA1

    977de5ea373d1366e8f1cd1a8b77361ec995e7fd

  • SHA256

    afc6b7fc520feb049954946e10cd3d43d55b2d4fe80b679af39c5106c87d54d3

  • SHA512

    3f2fc9f251293e520a6ff1d2230f9e5b90ac3881a5382332a3c86acb46d5cd3a976fd501fad29ce2f16fdb033e2be2ceed0d28744daa1938fc3d6fd149a76276

  • SSDEEP

    24576:uywX6Z8pwswlTbMNLcuzEn2AWTnD65pBT2fXEvO9:PM66wlTUFE2AW7O5PT2/

  Score

  10^/10

  formbookf3d0discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2