Extracted

• • Target

    RE,RE,RE,RE,RE,RE,RE; Best offer and ETD.exe

  • Size

    682KB

  • MD5

    cc2de3574d37bdd8dc01d94e26c6b80e

  • SHA1

    940e2dc45395bd32b3b3feb2385a375478924cc1

  • SHA256

    319ed15753e7ce1ff182e1bd2e4900de9c76300f30cb645c01b57324de50face

  • SHA512

    566aef7dceb911e67def06a78f79bbe4033a0ecd76fabdb61a62113a74a07924b5145012ff783b2c63c62eceeafcd031dc59ea4ad3036c3a495353be1fc854f4

  • SSDEEP

    12288:uF9NCviMjBCj620DFvG1S/TP+52mectA42tuLV14eKnDD2ti:unN6bBCj6rDFvJ/TjUtA42tuLcBD

  Score

  10^/10

  formbookcx01ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2