Extracted

• • Target

    620178.bin

  • Size

    555KB

  • MD5

    c10d8e2ba03e8e330199e67e61b24196

  • SHA1

    74514a4dbc39b836140ad3b38c6ebd1fde4cb8b6

  • SHA256

    6fea45df3c9acc6954753f6f3b2ea7a53707655fe75d828d5dcbf05342c99411

  • SHA512

    1cf2b9d6a8b5b39d7815ba7e6e8e02cd88a826f6b861bd22bd1916b32bc8de93eadbf1ce793971cd344c6ee935b33d7fc2dccfaa228dc5b6f162086d9ea69c87

  • SSDEEP

    12288:b31hW+URZrVRKCUFg+ew67N+brE3IoUFf00x8:LORtVRKLuVSbrZjx

  Score

  10^/10

  formbookbg11discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2