Extracted

• • Target
    Ultratech Alfa PO NO.333.exe
  • Size 246KB
  • SHA256 190090b95e7c9b2410ceb2149bb1c4369550963e56693e331bda3d020a0018e2
  • MD5 f43da80652fdc28d625bc4a8023743a0
  • SHA1 f2df5c4b839b6c9ec36016d4f440af9ad564b2a0
  • SHA512 f5cbe3d393da10259b786035a06e9ef126daffc8bcfdd14547d2d002f8a61074ce7a5e178b67eb6d73145707196277a077a7ade2fa31a2516498a294a60a80b3
  • SSDEEP 6144:/Ya6ZqZv3Cm8VhUC6Q9Ta5ruZbD4ZpjaQtg:/YjYn8V+C6eapuZbD4bjo
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbooksn26ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2