Extracted

• • Target
    M20240930086..exe
  • Size 744KB
  • SHA256 36421bdf90ea83d4e677a54710f4d35e2bc15a1222c4abb17e78996029f53c97
  • MD5 1f3a6997ed55ef6be6beccfc1996e011
  • SHA1 e79c2dde745697bace3bc0efceb136b4796b61a0
  • SHA512 75a895a1e52929af7c3799ac4a609989246659c2e3cf9dc076bc873d089dbd47219eeb8ba4fdcb82c8fe5d1215dbd0f59eab69b43afe782e8268b140a5cdcb18
  • SSDEEP 12288:v6Wq4aaE6KwyF5L0Y2D1PqLRMiO8RxrhwK9kNr2rReqSHmZBGtA/q80okL3Rf:tthEVaPqLRlO8VCx2NeqlTOt
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookc89pdiscoveryratspywarestealertrojanupx

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2