Extracted

• • Target

    HScx.exe

  • Size

    681KB

  • MD5

    7aa9a6424157856428679fa6665b3276

  • SHA1

    88f3a5b5cfc326bcb1fc9544af50e869c101c3c8

  • SHA256

    c47ecbb9f13f48daa79ff7bc582625f238b8760f6a4fc542c0dcb6d2ffbec11f

  • SHA512

    3446f3a8a2d1e06d0cac3f58f576d9329c906ac6befe561f1b46711b5e98e0b793ebbbd269b995b21026a72666496d45eec779c54109649418997c25a49adaee

  • SSDEEP

    12288:vGZKzvnOBKYvI82Ok316ZjS5dN6cGc9oNkMS5cpSj3E4JfvafDpnqFU3:LOOXwpGT9uvA3Lhvar4FU3

  Score

  10^/10

  formbookf19gdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2