Extracted

• • Target

    pzUHRx6alP7phBn.exe

  • Size

    571KB

  • MD5

    312f45637432b1efec858ed32bdef462

  • SHA1

    b23e75b94b84b31edaa0793b1228c444254effa2

  • SHA256

    af4f28ed9e5d8205220c60f42668e6576233f54885c63fcaf43c2315328f45f1

  • SHA512

    ca43f80d928b567803aa1597469a5fcc8cae580aa1e8a4c26d6ed248eb8e2414b56c11a23452679d60888d5f31344a0eaa7284168c38b3676475235561de7ad3

  • SSDEEP

    6144:ohYWUks3Gmjob1xiDu8lJ/NY9m6xYcqhB01kDryaKngqBi+/baDlXuS+hwtTuKS6:6cSxiDUQcqTKtBF/kN2mflW+X0cV

  Score

  10^/10

  formbookb31adiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2