Extracted

• • Target

    8dbf32fcd15ebdb72072e9b1e4d44fb82f874ab3f1c648eff56bfd116e38def8.exe

  • Size

    1.1MB

  • MD5

    23a19678a8e7581a0b8b8ede8922467a

  • SHA1

    df8f5c8eabf5a704f7a42def716d9d57ba0c74a1

  • SHA256

    8dbf32fcd15ebdb72072e9b1e4d44fb82f874ab3f1c648eff56bfd116e38def8

  • SHA512

    a47ff825ff8d29e10b424d142128a465366c6ebd4b979569e9d9065eaca3e2fbd4fee158473c22b0e13383baf1da130d54c78ba693f551042250923e976c1f67

  • SSDEEP

    24576:ou6J33O0c+JY5UZ+XC0kGso6FaqidaP4RZelFWY:Cu0c++OCvkGs9FaqIm4RUiY

  Score

  10^/10

  discoveryformbookat22ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2