Extracted

• • Target

    4ceecda6e1ddcf38828df1e7ea882fdfae4359ed0c6a55c86cf875dd3143b549.exe

  • Size

    1.1MB

  • MD5

    77a9deeaccfa74b131ed760e8afd6bc6

  • SHA1

    5e1a90008e1c40d8aa892b116476f39338b3b20d

  • SHA256

    4ceecda6e1ddcf38828df1e7ea882fdfae4359ed0c6a55c86cf875dd3143b549

  • SHA512

    5bb993cc88a71922c7a744d546864cc5d3ae1ccbf47ba4d2c5e47c573fc35f741af77da262b95f6484f2574f9b78bf4ebbec60a5c87b05bf3f017cf42f0d5e8b

  • SSDEEP

    24576:uRmJkcoQricOIQxiZY1iaCz/DejIKALMVog+:7JZoQrbTFZY1iaCHjAS

  Score

  10^/10

  discoveryformbookc24tratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2