Extracted

• • Target

    Invoice, Parking List.exe

  • Size

    737KB

  • MD5

    fe653d60442a24191e27c076014320e6

  • SHA1

    80079ce48688442186d910c921aef71a407f6b4f

  • SHA256

    86f8d817d26e2a9566ac4500033855f9b17e50ad4276b9d488acbc53894edd91

  • SHA512

    62d6960bc2cc4a5f581315904a9ef2492b05ff7b13545e9ad747a224b76f56f84a331da830cab3f725eb1e6bbcef4e5082743a77d277447bffc09e4868b4ff00

  • SSDEEP

    12288:v6Wq4aaE6KwyF5L0Y2D1PqLF6iMfh1hB7BCOLPPnH+ojoAXM8fFyG87xO7S:tthEVaPqLF6iMJ1hDeopMHGSIS

  Score

  10^/10

  formbookc89pdiscoveryratspywarestealertrojanupx

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2