Extracted

• • Target

    LVThgpHFRmrdHY0.exe

  • Size

    611KB

  • MD5

    509cdfecf3cf6fe8d3def69f6c64e9de

  • SHA1

    d2b20716d3b7601506fb31551d5f235a117d4277

  • SHA256

    c601518d243a95bd69059eee0bd30095ecd0bc33f2ffce671b695145429913b1

  • SHA512

    c93a06b7df80ac9896bf40bacce1d64036a4d5ace3ef94fb456c4f5c7df98fecb8bfde421bb95c2e2f57552ce5349d6f243f5e521dfffe7374ebb47dddc5f233

  • SSDEEP

    12288:YP7kvDoQ7+M+fjf+oH3bMyuhVAJ2LsBwaUJ/H1S0DM:YPonR+fj2bpVA4B+0I

  Score

  10^/10

  formbookb31adiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2