Extracted

• • Target

    20240929162138.exe

  • Size

    1.1MB

  • MD5

    98e9de2d6078c01e65d3f41ab1edb255

  • SHA1

    b48af26ed35457a945ea8283b5ac3e53d626a26e

  • SHA256

    3c321f4c7feb1233711409ad1fc9371732c24a302d3e5b9cd5e238ab1a638288

  • SHA512

    99c003bdcd15576f4a686d4a945b2993f426ff95858409cf3afdf005a0e39850cd1db955445ec8a2ba394bfdde0b3a9682161edf6fb68752db815f473903d8d0

  • SSDEEP

    24576:uRmJkcoQricOIQxiZY1iaCc3cPGY9obOhDzA1iu/RZxUkx:7JZoQrbTFZY1iaCkzbOhuNRZqkx

  Score

  10^/10

  formbookc24tdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2