Extracted

• • Target

    yiLe926pJsBgixu.exe

  • Size

    648KB

  • MD5

    b5c6dfe319520065564fa342e1350b9e

  • SHA1

    949eecf1075c49cfbfd6bb843dcbf0436660aac2

  • SHA256

    93b04d266b5fddd03311c3d22a2a37ab451a3a0c6e1a28ebc2764ee5691e3291

  • SHA512

    268f3d739f7397e384a3f5e462ba56f1ee9b8208e0041c52f19eccf136b32bb80f6cfb2dd1a1f5612ad42caffa55fbe24dc1787fdb4cdfcd29dfca38b01bbadb

  • SSDEEP

    12288:CPOc0ArVAW0Ez3WZY6mCYNkMx9Dsa7Qq/be:fihvF3WZYUYSMDsN

  Score

  10^/10

  formbookcr12ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2