Extracted

• • Target
    G6uGAyUSVscVBYD.exe
  • Size 746KB
  • SHA256 c17477a67b72e26224a8670e25ce6bb06e2653e3adbf3797649c137ab855dc24
  • MD5 1e0cff1531ce4e7d86a7e9ddf44fbc51
  • SHA1 b3faa19194515d6961f4cd96251ef484b7ed5ff7
  • SHA512 f92a3c89c171ceb564c50808af38bd51fd29aba9c3e1284b3d2ff07a22310416eaad060fa225ee50980b99d4d7b8e464bd78b6922247d8426c2170a13fe04014
  • SSDEEP 12288:hoTCBq8jt7SS2dolHSSIbHnTvJ28RiZlvp3DIzF7G4sFAuJMPPFZ1VrPAmpL:hoTCBq8jt7SS2KlHSSEszvp3szF7p2xm
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookmc10ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2