Extracted

• • Target

    CopyMX2N79.exe

  • Size

    695KB

  • MD5

    c02762dd741807fe5db17e96c29448a1

  • SHA1

    0b1c135bc1c956c05b3962be6ec79cb44e29ba1d

  • SHA256

    02296010035b93a3435b5b06a9af1f2715310bcf370918cd80114b18fae780b6

  • SHA512

    82d469577a2c30554d1b083b5ae214cd3c4737ef7555922b5b6666232d2aa26236a499c257370e5b20e82e0fb213968d90b383b7688affa413d255c3a42c327f

  • SSDEEP

    12288:ORZAplT4AWrNlqpANwJy1nfqzhd/sPxd++rOb:UAzT4AWrbqpAx8gLRrOb

  Score

  10^/10

  formbook3iwdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2