Extracted

• • Target

    346d6afdb252d251ce95155e05789adf73f55994f94687286dc4a0fa95327090.exe

  • Size

    1.7MB

  • MD5

    9746b0e34b3a2048074caf932a112cc1

  • SHA1

    340bca56d23ea75d9e3e8e1e15b9a9bf8b051ef8

  • SHA256

    346d6afdb252d251ce95155e05789adf73f55994f94687286dc4a0fa95327090

  • SHA512

    0d628f7e5cd6f591a80a6b5d40e9b576bd9626b8e929802930c45e47156fe37669dd5989d6d0976ff4a720bf6ac8202dce51284e5e41c79b0164bdf183d8ab14

  • SSDEEP

    49152:UTvC/MTQYxsWR7a2idKVsULUcyufvHh3O:0jTQYxsWR7idKV9Lffh

  Score

  10^/10

  formbookhwu6discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2