Extracted

• • Target

    FyqYh8fPEic6dw9.exe

  • Size

    676KB

  • MD5

    11eed83490fd368317cc4b49df18a411

  • SHA1

    b367f98a13c73575bab7bd5626b1ebcf0ce895cc

  • SHA256

    c920a418d58520669f8f3d0db050c479bb16548283758221a24ad631e061fab7

  • SHA512

    a339d0361ed687811df7d16bf513529318a49263aba572902c5b5cb3395befd9dbb7fd82ff180065103ffe8f0da15ffd3b5f9eab43a262b4416c7f1944b7dea3

  • SSDEEP

    12288:P8ewloL3rlW4A/bJDbz4EegdxRvDw4wbuGJ0BqDfapz9i:PKyvybJDbz4R6xRLw4bGJcIYz

  Score

  10^/10

  formbookd16hdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2