Extracted

• • Target

    DRAWING SINCOAUTOMATIOM86757786Ref6777POSINCOAUTOMATIOM86757786Ref6777.exe

  • Size

    1.2MB

  • MD5

    1876c101ef20d1d02f23014425ac06e1

  • SHA1

    28abc61712aa81fe8f0838f1588cbd556d923e89

  • SHA256

    1f4b2861d0fcd9241dfd17b5ae99741e712f0297ca5fb4f3858340ce3cbb91d0

  • SHA512

    87e7838b5ef65a0c84c40e6d881f44a8af2a43354a1b7a9d301a3180ac2df77cfc4aac04aa4042e187959373b2c95d9ae62570a6c6e29bc982bfd5a5cb67398b

  • SSDEEP

    24576:GqDEvCTbMWu7rQYlBQcBiT6rprG8an98M8HQXeYeun1033:GTvC/MTQYxsWR7an98M8wXi6

  Score

  10^/10

  formbookot96discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2