Extracted

• • Target
    Invoice, Parking List.exe
  • Size 758KB
  • SHA256 1a52416bc054c0f2a46f2fd215d73d3285334fcdacf02ed449935bd93fb70863
  • MD5 6e39ee33f6527364cac3cc4bbf276f26
  • SHA1 a7c12eef84ae778ce5158327d419508eb5b199c8
  • SHA512 d06164091fe866df2626377b2d2589d9da291c73aff55b40db1844e32290c1f5e37b1ba8155ee02a351366df5a8862ce0b2e5b28a9b14b65cd568064cde28a78
  • SSDEEP 12288:v6Wq4aaE6KwyF5L0Y2D1PqLVRX3OyQsAhJYUVTx6AflSeqz2jqPB88bYVUCYH5g:tthEVaPqL7nvQlhJYATxDYeHjqPB88ZO
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookc89pdiscoveryratspywarestealertrojanupx

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2