Extracted

• • Target

    b50f7a9f1d86f988e480374a6f2bf9a9ed5773db6b2a6e84c4713748ec7a1271.exe

  • Size

    1.0MB

  • MD5

    df30c4108b16e9b4bc8c114b77fe3f51

  • SHA1

    45816e511331aa682679eaf7246b71288c0ca5c4

  • SHA256

    b50f7a9f1d86f988e480374a6f2bf9a9ed5773db6b2a6e84c4713748ec7a1271

  • SHA512

    872955db63f85b52d963ac4346d28a3af1a53765fa3e87f84aa3808699278ae4f4ac6351da8a8ef1920c6f4a383f73eb75bfc137a8988521059ffeeea95658c2

  • SSDEEP

    24576:Ju6J33O0c+JY5UZ+XC0kGso6FaVnt0KI9dOtVmVJWY:ru0c++OCvkGs9FaVnt0KI9dkVmmY

  Score

  10^/10

  formbookbopidiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2