Extracted

• • Target

    92b1f2ee516e87aff3e8ef41ae051276a9cb1002ccd788a15e527df458631a70.exe

  • Size

    595KB

  • MD5

    ee2875f921602d7f7f26f0b788f1b3f7

  • SHA1

    3690ccea99c4399ef2990ca3dc3d79eb29666794

  • SHA256

    92b1f2ee516e87aff3e8ef41ae051276a9cb1002ccd788a15e527df458631a70

  • SHA512

    85c813d764baba7a8a9f246cfa26208a886c64c1df8cca3863e8898342382a4dd7a0734b34fc904fb6637f1dec215da92a714d01c1fb430a811933dfd99275e5

  • SSDEEP

    12288:6YV6MorX7qzuC3QHO9FQVHPF51jgcEQ433ZwrXUuunukKlkA:pBXu9HGaVHOwrXUuepDA

  Score

  10^/10

  formbookephbdiscoveryratspywarestealertrojanupx

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2