Extracted

• • Target

    rrk590123c.exe

  • Size

    297KB

  • MD5

    668a6855d8ce2efa9f23170bd7c5ac5e

  • SHA1

    0586ab192841fa947644184d667e81640ea25957

  • SHA256

    7dcb1ee79eae7ff95e311aa25d0f73f1d89c266a8f609dfd31782054b03c3de6

  • SHA512

    7070bb748df0445b88c2438dd738967d61f10523a148e6df84088dd0baba36c5a4861685056f024b2f55b8f3bf1a7021a8a5adc43ed7d0580937d1de8c5a87de

  • SSDEEP

    6144:hsg/lR8Nb2PKfOlQQ7b5q9lDY5m0cW6qpzt1lOMzxGusc7d5iv2:hsg/lmbjzjtMiO5iv2

  Score

  10^/10

  formbookk1rcdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2