Extracted

• • Target

    BKG#339LN2035492.exe

  • Size

    428KB

  • MD5

    fc9a7d91c44b35ac45235cbd428d5f71

  • SHA1

    3a2306041f07ac63b24375f2393cdcaae4a9aff2

  • SHA256

    10a9aab39489aa507d35bb18b357ca6c9f8642d8fa27fc1ad9c7de03c8e9415d

  • SHA512

    d235cd67e1e74675a1adaeffc89df82b2314dcb0d8f67887a9b9b0d14e9f3a0bd5c6c3df47ed08e6ab7f5de879be32b8434aa1843647b911629018db1312bdfc

  • SSDEEP

    12288:QnOLBomnNZTudDLhkNbjPNUg6zhDn1ShWOi:QnkymnN6SNXWg6z91AWOi

  Score

  10^/10

  formbookcmgdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2