Extracted

• • Target
    a073edb1dacc3f6cbb7b416c6196f7d56a8d6d195a337952524e1e8ee5921461.exe
  • Size 598KB
  • SHA256 a073edb1dacc3f6cbb7b416c6196f7d56a8d6d195a337952524e1e8ee5921461
  • MD5 aa175e1bf43f1c940ffd2e23f853a070
  • SHA1 bf01a6051d30abac10ba726e7ef40a68c17799f6
  • SHA512 65e1295e92dc6bd4bbf68c8769312cc024e84b1264e84b44d31cdec28f484dc9ac8026b42b83ff22848724e65ee57b0c9d777bce3896b84c497a668921e2487f
  • SSDEEP 12288:mYV6MorX7qzuC3QHO9FQVHPF51jgc/Ppf5/6KLrA5v5Jg:lBXu9HGaVH5hC6k5Bq
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookhc58discoveryratspywarestealertrojanupx

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2