Extracted

• • Target
    order.exe
  • Size 737KB
  • SHA256 86f8d817d26e2a9566ac4500033855f9b17e50ad4276b9d488acbc53894edd91
  • MD5 fe653d60442a24191e27c076014320e6
  • SHA1 80079ce48688442186d910c921aef71a407f6b4f
  • SHA512 62d6960bc2cc4a5f581315904a9ef2492b05ff7b13545e9ad747a224b76f56f84a331da830cab3f725eb1e6bbcef4e5082743a77d277447bffc09e4868b4ff00
  • SSDEEP 12288:v6Wq4aaE6KwyF5L0Y2D1PqLF6iMfh1hB7BCOLPPnH+ojoAXM8fFyG87xO7S:tthEVaPqLF6iMJ1hDeopMHGSIS
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookc89pdiscoveryratspywarestealertrojanupx

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2