Extracted

• • Target
    Ziraat Bankasi Swift Mesaji.exe
  • Size 906KB
  • SHA256 f9ec408f51f4e31dbe8977db554dcda8e58e0f89eda485b361026b379f69eb6d
  • MD5 8727f9bf0838ea55569364823a201dbb
  • SHA1 4e618f730d251a9a1594a89ded752d79256f3064
  • SHA512 17d744df83a437226d765bee98c44690eced75e8e16977db56ee842cca96517658b93c59bd7e5b16081aeb6475f12dcf76ba78289ad6c8b7f4bac833d6c44102
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookas31ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2