Extracted

• • Target
    JDtnp2mcrQvXDeo.exe
  • Size 652KB
  • SHA256 709cb8b2628d52b597a87f74bd8867dd40cb54bd48940d159dd11930d9d76472
  • MD5 3aee87433e931e3a5fc22f57f428fcbb
  • SHA1 f6495dd08bdc9d8d049e1e898800bd8d9311a549
  • SHA512 8f12394205a9940feaf4d350f2d4d6f3adb693e00a56ebb8933c6cb6b062f419e4aaf0f4ccccd507bc1cfe042bd9ac0ee669d52e29daebd2c8465a3c709e4f24
  • SSDEEP 12288:G3qyJMjKlhpPEe0XTfBSH9GuIwY4HwHDohzRqrewL5aArEpVLsGY:G6OFh9EVckHBshMreWgWJ
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookcr12ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2