Extracted

• • Target

    New Al Maktoum International Airport Enquiry Ref #2401249.exe

  • Size

    1.1MB

  • MD5

    621c253a4d715e3af16fe8be2fdd8cb1

  • SHA1

    68ce09cc59887c7f9649f22e6688028957d6c55e

  • SHA256

    007c997b49ac0889e71757762c82432a975a273eda4c871acec3c0823c6ea530

  • SHA512

    56616c4175b53f6b00591e7aa5d32146fb168de7a22501c9fd784a0ccc5d403b5b920f01f3545cceab9ea0dd0cc5df992d339bed6a838e930094f35782bc4fa6

  • SSDEEP

    24576:TAHnh+eWsN3skA4RV1Hom2KXMmHaIxs0ZkXe9VHdA5:eh+ZkldoPK8YaIxIe9O

  Score

  10^/10

  formbookpt46discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Blocklisted process makes network request

  • Suspicious use of SetThreadContext

  behavioral1behavioral2