Extracted

• • Target

    SecuriteInfo.com.Win32.RATX-gen.20743.26598.bin

  • Size

    859KB

  • MD5

    a1beddb06d1826829f7ff5f86e3fd9c0

  • SHA1

    9f2562a5e1f702b11183df715e71ff77e0284d41

  • SHA256

    44a297e5ccf344c0422f4f80b2c490f2650bf44c142f131378b2eb6a6507bc9b

  • SHA512

    3bafe9bde27096fe04ea1b8a4e4e543c51f20902505988d4c68476c192109362ccc86b59bac82c179fcb8d6f4c2f3d561706a5441378997d1968d5ab286c22cb

  • SSDEEP

    12288:899/9WflU/9XxworMzl5mWhm+DvuL4lZQbcRiv1Gnt2vJa+4pgexi:8/ylUFMmW/Dv5DQ714YaFpxi

  Score

  10^/10

  formbookgtt8ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2