Extracted

• • Target

    Confirmation!!.exe

  • Size

    646KB

  • MD5

    14b113f3a81cb3d3e896601fe247c31c

  • SHA1

    5021223cb23d9a5d5598b2438ee08194d42edaf2

  • SHA256

    1e6327a5456f3aac77ec28cc80c9f9f8cff8a157a25a8a2f597764dcbccce3ea

  • SHA512

    96d6f8bd5135f9ad38e6042f3bdd30bbe08c877a779dcfbc8b7f5e0c4a142f8826ffc97ff0ee25d1863a380252ada31885217db6e0f89c3b19fb4acc9b2aa981

  • SSDEEP

    12288:07AFnSTJ0TmqUmY/G6C7PgSMuE/5pTsKc/Q8VwNUmVGS:MqSTJ0TmrmY/VCB21C/Q8S3VGS

  Score

  10^/10

  formbookhe2aratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2