Extracted

• • Target

    Swift_92be67ab-e027-4955-b6fc-64bd720.exe

  • Size

    1.1MB

  • MD5

    b5687b090278f6446be5046b802dd2a0

  • SHA1

    5ffcad717c3ca822aed7a6e7eb311e43f8ccc294

  • SHA256

    94ed3b01fe4b13ebd1d354f87387a8b09ca26829115306b86bbdc2d1d07a0b3e

  • SHA512

    31a633db41275c8c19614de0a09550e993206189c898ee1e21bf76f05c5a363b8e3da0e08a1bf54a706b90e85891dd639dffe836ec482ca2af5b07191ab0f375

  • SSDEEP

    24576:ffmMv6Ckr7Mny5QL9uklsL2aRnGnJXgVuy6PG+ROusD:f3v+7/5QL9uk69W26RRfsD

  Score

  10^/10

  formbooke62sdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2