Extracted

• • Target

    FLY.exe

  • Size

    575KB

  • MD5

    d400c125c91f0da96b71a1335d5c7e9e

  • SHA1

    c5cadd640c60cc5ae5377fa8726c15f38808a131

  • SHA256

    6aeb335b3a8c4506ba69d98007266a0210930cddabc6d3fe6b6c0a28e59ae7db

  • SHA512

    8d77dc100e939fd72e3036307883584af47c35298e049fbc3c92cfb94c4a782180ff0a5c5148d72e4f2e39d6208c9237f65b1f6488e5bfa31cca5c30c0ffbf2f

  • SSDEEP

    12288:nE+RIimQdL6iHOHpF2hJwy+atu6KVC94MVK4ENzZK:nE+evGOHpKavI4YEN

  Score

  10^/10

  formbookcc73ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2