Extracted

• • Target

    zelIxbPSWok3YNl.exe

  • Size

    710KB

  • MD5

    f474a217c3aef6a4bc1294999edb5dec

  • SHA1

    9914f3823ac23b0fc0989651e94c71c729a04825

  • SHA256

    9960236e7b8167ec9b3ebc5426392923b89f58763b83c914bd34bfd93ad8aaab

  • SHA512

    74913c665b8e1fe183a3fa5809dbf58644f64d1548be9a1512c300235b77f3a4665ad5c5a9c7896c9bf55add0054efa2f0ea1070a3e4958da0a4dc730b9ea9f8

  • SSDEEP

    12288:9mlKWNu9Qetd4HIPM5b+RBKrv1tKT50H0SU9CT+zOs3BArx3/fs7z1v:9WpMsb5bYmve5b9CT+6mBArN/E7

  Score

  10^/10

  formbookd16hdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2