Extracted

• • Target

    4b0562351e83e3d40dfa638ce4811a2699562c3bb4ea1d3afb4f76d00ad0b33aN

  • Size

    1.1MB

  • MD5

    3739784b84b401cf916f89291adfdbe0

  • SHA1

    5dfa19527eab46a5da1fbbee052d2bf1938385f7

  • SHA256

    4b0562351e83e3d40dfa638ce4811a2699562c3bb4ea1d3afb4f76d00ad0b33a

  • SHA512

    e918a09910266f4c1d981f6cc8d949e4e480de9d17c305a996d7cb061f156aed8fd2560297df28f16dc672b407cd45feb615db1a0f5f14d5f2ec5e0d586d29ee

  • SSDEEP

    24576:uRmJkcoQricOIQxiZY1iaC0a/P8ly39dq1TyohqbvXcXo9:7JZoQrbTFZY1iaCtiWqZyWqcO

  Score

  10^/10

  formbookc24tdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2