Extracted

• • Target

    t5ueYgHiHnIdeNe.exe

  • Size

    684KB

  • MD5

    a2d4be5c186159147645f2ff6ee1f690

  • SHA1

    1799cfb6c5ca5224d72d7f1696ad36c2624fd057

  • SHA256

    9f67248a754e414ffb2361932c591abe39581b21a20d51ccb46db5e534a9531c

  • SHA512

    29b5307b7d05827b6c6bb8489357d6abbd8e293dd56a6f6a65d2af59111fbb9e0aa2a786ce0690b5eea6c025e3e78523c5cc7a193cf23dfb4f95863a94aa44b0

  • SSDEEP

    12288:mdODvVloha83lbhzRbIniLawF+poiDsv6z6ViEqtwsdf9i72l4:XyhaUlVzRlqpEv6z6ViZm0fkE4

  Score

  10^/10

  formbookhe2adiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2