Extracted

• • Target

    Booking Details!!.exe

  • Size

    1.3MB

  • MD5

    d74ade79fdf326fbb5ab6e9cf1d7280d

  • SHA1

    148e1d75fc89aa2871523ff4a479c7cc821fd277

  • SHA256

    296abb33b7337fa594b7a28aaa0793ff1e7218b97974fe1764a0773f8962fbdd

  • SHA512

    9e1ed564c1b1ca5c2c026da504a8c234ae3e14be061a53cc220a225feaf18d96b517b9d4dae1ddb31cde872d62b49f20f15b24700c59fab52362fb6818534fda

  • SSDEEP

    24576:LnluD7SzYdJd2jfYfkreLTqlTIrI+xjNJtbmJvaerVPsX3vT0xbCA6/+otq:Llu3SzYjdSNrehrIIjDtbmJHq/Qha+3

  Score

  10^/10

  formbookhe2aratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2