Extracted

• • Target

    Ro1lNStkh187tOk.exe

  • Size

    571KB

  • MD5

    e2058924c6c6b95dfe0ab513fe6f03c5

  • SHA1

    b65ed88c00f8d60a12d00886edb7e675e7971213

  • SHA256

    05f3157ada1ddc0583e51a8602f352a8f9a4e139b6a624ee80a0e1acb7372920

  • SHA512

    cc505b1987b6974abd4b47ca6beb0ec04c82ceb4ca1ef6d0c810b1ad680cd94f15cf8bfea3ebf6a7f47a3329b1b59463d0914863deca0ee5931d55befbf4e64c

  • SSDEEP

    12288:y9/kf31t3YGgeiiWAXVXL+oQznkQaVYJJKkBF45sfS9i72l:jP1t3OSXVXCoQTkQNr4q6kE

  Score

  10^/10

  formbookb31adiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2