Extracted

• • Target
    QiKJCf8SJcQ3BuP.exe
  • Size 542KB
  • SHA256 9e9cdc29fefbbbe68a8341df4d3102bac12031106e1f14d1185f57a787a7447b
  • MD5 ef328f74499754a472157825f620e917
  • SHA1 4112900035d6a3ea4955a16f16a75995e33dcef8
  • SHA512 dbe470cd288948ca549fd53800f7d67dfbc90d765913c151766691001938a593ef3be4264ec9dc7cb958a2fb7e2b1c9b7a289a83e2031ba16c7182b16b2cd266
  • MD5 SHA1 SHA512

  Score

  10^/10

  rattrojanspywarestealerformbook

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2