Extracted

• • Target
    E-dekont.exe
  • Size 664KB
  • SHA256 f51981fa6724161490ba32cecb5508a089c9cf2774306220bfacd83cb75ddbf6
  • MD5 a9ba3c585388629bde8a8be7b71e8ca3
  • SHA1 6f0d2c1afcd66b245072fd69a2649ee453ee23dd
  • SHA512 8fcceb9de08956640de608ab62dc8707e776863b3dfbdc01357841752edd608dbd5470ad15958ac149bd2c3f089475d4f29e758117f10614952cffe51bfc567f
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookb29aratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2