Extracted

• • Target

    Release Pending.exe

  • Size

    1.1MB

  • MD5

    08bdb251d619b9d222c5481e4432339c

  • SHA1

    49c9d1af7565e7babd6df49890555a8a8aa3a534

  • SHA256

    1312d3fc06f4908cc94cc07e86ae369116a825b7fbd22b98d54b04e6c3ac59b5

  • SHA512

    63ba4fd6150fd5ccc65023927a6d64fc7806312f6edb6e2e091a57f6e0e8c6365e67d240e6699d622790d75339d751dc02c66e99929f18f65462fabf122de921

  • SSDEEP

    24576:ztjW/47VJyA5nucMY7AH979NrGGws3z67Y9Ea9RZN6RVyDU:ztjW/iF5nnNcjrjXmU9tZMXyo

  Score

  10^/10

  formbookhe2aratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2