Extracted

• • Target

    signed contract.exe

  • Size

    762KB

  • MD5

    1cfab4e68a14edd1b9a4c54561a8aa69

  • SHA1

    6712b67cc45056cc9d3bd27c0a5f6b5c29eabae1

  • SHA256

    8d83a9a3bbd6e63e37b6d66c4febdbcf17a48fe77fabdd52c5bfa01a661a33da

  • SHA512

    a3f100f9a0026e29352c2af3e94ab0f20bd4c45799545b0104b6c1029d2904d9b06a160f58db7a3467562686cdabd4cfd74d8ea5b49af68a31fc541490b759d0

  • SSDEEP

    12288:v6Wq4aaE6KwyF5L0Y2D1PqL8CN5+CROltnD9bmAcZBYfFcEYsvIU/wR7UmtJZeFQ:tthEVaPqL8C7+wOltDrQB0cPUwesmrS

  Score

  10^/10

  formbookc89pdiscoveryratspywarestealertrojanupx

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2