Extracted

• • Target

    sRdjnXWxDaXi9aM.exe

  • Size

    570KB

  • MD5

    f4347ab1a21a8d5bb89536d4a0dc74c1

  • SHA1

    13eda0794dce375300168f1c25141afe696cac44

  • SHA256

    c66ab9498121b281c66643a069b22ef3f5d8eee36b9f36ce627eb91f09111d11

  • SHA512

    d6cfd2276a6d8d4abf6e309093fa4f9d14cc4c8d675e711ec40e1f558da1fece67875f91bf720ca9a15d10d8659969c372d2822cdfd6fd82b8746b54d4c25fb8

  • SSDEEP

    12288:2m7kvkyLcUWt96d/We0LyHvo4mmAA7c/H3r0jxqYZMWx8pbUiQJAiif:2moxwjL6tmIqrIcYt6e3Pif

  Score

  10^/10

  formbookb31adiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2