Extracted

• • Target
    tYEY1UeurGz0Mjb.exe
  • Size 606KB
  • SHA256 76650fb8aeaf679cd204ca347026a67767ab8d9c27f65597b275d8d57327e096
  • MD5 a9c37f81cd9a181dab2262d2f8456a76
  • SHA1 549e7a8c8e998d3b7f85e61a7171685af231e780
  • SHA512 9f6c03d6c08eab4c6cf9504fa5402436bc783a9cf95ab9419f1f18f26e605bd66c44fb3a4ab7489bf6a1fcebdc9cb2a65e8a77e5f81744704ebe29c6dfe05002
  • SSDEEP 12288:i15ofC1PsZKuN8TsFLtm9FTXJWhnVwVEhkG2jbZVv1XDSXGMvu:i1n1sfSTshg9FwnV3mj9Xd
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookdy13ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2