Extracted

• • Target

    M20240930086.exe

  • Size

    745KB

  • MD5

    edf9ed91bb3ab00545f77fab9407815e

  • SHA1

    b31f2e4257be6051af137b5d71d08f7a2a84d671

  • SHA256

    04cc97f6c5e790280083938432502b46d3955489b710e6ba66ba2fb98b9e76db

  • SHA512

    e3d1c7fb0c9ac3e6f036d6e117a96336009c15053bcff9341cf22f6765c963f485ddf7e0ddea338e1a75789a12ac1af4f0f250714f72755a445bebb99e18c722

  • SSDEEP

    12288:v6Wq4aaE6KwyF5L0Y2D1PqLmvPw8NLDzsTSjO/ByTwxEGlk3vskgTCbM4Y:tthEVaPqLAPZNHYz6Glk3oCb+

  Score

  10^/10

  formbookc89pdiscoveryratspywarestealertrojanupx

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2