Extracted

• • Target

    fb950137c6cdd6106f6a642ffa4c8073c067b2cf8a057802415310cf24f6fc8a.exe

  • Size

    1.1MB

  • MD5

    1ce360f7532eeff6b69b01a1f59cbbad

  • SHA1

    1d4497e3469dff17d05be582a07ae8bce1072de7

  • SHA256

    fb950137c6cdd6106f6a642ffa4c8073c067b2cf8a057802415310cf24f6fc8a

  • SHA512

    90d8c8268fd8703c61fc1a27b4cbb705af40f7b30498bd21b661f198dab1a77e0e15e9b259b1e75235a1d68eb94138eeca73d5cce3bf96ae0b5884c9c74d956f

  • SSDEEP

    24576:AqDEvCTbMWu7rQYlBQcBiT6rprG8aJA9Um9EJolTJyY3BoUp:ATvC/MTQYxsWR7aJ6Uuo0TJHx

  Score

  10^/10

  formbookat22discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2