Extracted

• • Target

    newww.exe

  • Size

    1.3MB

  • MD5

    38679fcb06dc756b3c54419c716005a9

  • SHA1

    06580c53336b0fa594443a721ba261c8f1c0ee51

  • SHA256

    e64639cc4061ca733acf32ca7518b8d30de90f26df61800683dc5817b5237ee2

  • SHA512

    d1fd881f03e19bcb77b09c13ae8befc77ac3227206c643b7f417c41aac5cb0775b89e402d936da9e51967a0bf495599c2c37766a065811660c00c8c9078a7a82

  • SSDEEP

    24576:SqDEvCTbMWu7rQYlBQcBiT6rprG8aI4uOGIq1N8ZRMKauEh4p0BU6/+:STvC/MTQYxsWR7aI4J01NsRCuEFF/

  Score

  10^/10

  formbooka02ddiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2