Extracted

• • Target

    Signed Contract.exe

  • Size

    764KB

  • MD5

    c29c35fdd0cb6fb2a67ebe5e66d031bf

  • SHA1

    8069a08c89042bf1bff896e9d8a68f05db5af316

  • SHA256

    7d99c8ec073617681fc7dca3714bce08da1e6a9920aa39b57af734238d5d685f

  • SHA512

    f6dd09aae40a4aa6291d0d384f5b5d4fe94770df93585b235fed994f2dbbeb214550b0a3c55bb479f4c5b316520748d2ccec01b1b85e965fb0c51948d7a229b1

  • SSDEEP

    12288:v6Wq4aaE6KwyF5L0Y2D1PqLXkK+rLst81zQw+h5GATMnNTXXe53V:tthEVaPqL059QhtTMNTXel

  Score

  10^/10

  formbookc89pdiscoveryratspywarestealertrojanupx

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2