Extracted

• • Target

    5TbQhXL8NUdBceg.exe

  • Size

    746KB

  • MD5

    fc3a43360662f6208ca669d161957b58

  • SHA1

    16d7ba64dacfbfb96d9577d0e9197a578ca5fcbd

  • SHA256

    8af00e7a5aa93e2c083481d3b4e5b94f7d1844aab13f13fde1b27a986f38f662

  • SHA512

    eb963fdc482fe1131fe0819bc63182107bd3a6570613c8bee889e43ada102452c9d99576055002be4fa9f3fd906db911f68f267115bcd8376058c57b0c076608

  • SSDEEP

    12288:WqdBj0z1Cat1UoIG5MPU0wOqp0473y4qdDNPjyu9Jyq3qQLhqpu1aqyCgW+8jd9:faDUobyTkpL7yPDLhqpkaqyW+8jd9

  Score

  10^/10

  formbookb31adiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2