Extracted

• • Target

    OGLT JOB # 11217.exe

  • Size

    748KB

  • MD5

    7d311cdceda373fd94310919b7bdc784

  • SHA1

    9e1504e3148829775ef7d1c80095dda1fb725e73

  • SHA256

    067d0a32b11208193e232f3b4d05b24f0d730ffb23049a1611be068738b9d11c

  • SHA512

    d9d8ba2bdc04c32c542e1b26ee538de89d758a4895deb9fe49ff64fcb3e9d9246a02bf160d05aecaeaa7dffd55fd8b5889d7cb2949407058607fa689d4ca513e

  • SSDEEP

    12288:2FuUyDYcTGfg3IzN6SJ0OSNAwmeU1Lq7LbgpL5hLavGrgjYNvxtSE+nY:t2gqqqNVMA1qXbabLajWon

  Score

  10^/10

  formbookm25sdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2