Extracted

• • Target

    ebddd04d90d5317ac06e4a5515143c6b130a45d2c328c115f3ee37d1eb665c0c.exe

  • Size

    1.1MB

  • MD5

    3f0068b95be434b5a808526fabfad3c2

  • SHA1

    17caf9d7f313976a32d32dd91a5d67456a19652f

  • SHA256

    ebddd04d90d5317ac06e4a5515143c6b130a45d2c328c115f3ee37d1eb665c0c

  • SHA512

    32a59eed3d5084bc1e1a5f411fec9876b10d07e97d286abb3463f27b9e34663f5995962ce694e97900bfe72a831fde1faf0c519df92d3783dd87cf5087447e10

  • SSDEEP

    24576:LRmJkcoQricOIQxiZY1WNygPZNHYz6Glk3oCb+:IJZoQrbTFZY1WNyI3i60k4l

  Score

  10^/10

  formbookc89pdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2