Extracted

• • Target
    signed contract.exe
  • Size 762KB
  • SHA256 8d83a9a3bbd6e63e37b6d66c4febdbcf17a48fe77fabdd52c5bfa01a661a33da
  • MD5 1cfab4e68a14edd1b9a4c54561a8aa69
  • SHA1 6712b67cc45056cc9d3bd27c0a5f6b5c29eabae1
  • SHA512 a3f100f9a0026e29352c2af3e94ab0f20bd4c45799545b0104b6c1029d2904d9b06a160f58db7a3467562686cdabd4cfd74d8ea5b49af68a31fc541490b759d0
  • SSDEEP 12288:v6Wq4aaE6KwyF5L0Y2D1PqL8CN5+CROltnD9bmAcZBYfFcEYsvIU/wR7UmtJZeFQ:tthEVaPqL8C7+wOltDrQB0cPUwesmrS
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookc89pdiscoveryratspywarestealertrojanupx

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2