Extracted

• • Target

    COSMO-KUMPULANCERIASDNBHD.exe

  • Size

    561KB

  • MD5

    19917380813158f6da23199966f76142

  • SHA1

    e2169950987b949889418dddeb11ac0bd85204ce

  • SHA256

    10b85fb4905227bc1e37c8ebfcb317b188f9d93a761aa887977dae17c71de81f

  • SHA512

    9585a7c40ebe4aa34eea8330d0ea61fe30db6a96eca468b90e532508d1d53ac339df337f16d3e3313b68cfd55df8d17799de3b7eb617aa6b93b917a139a5fd64

  • SSDEEP

    12288:l1RveBYT84wRjvVjfSKXK9Lt80akQ/MDTcy2fjTIqojCNNgU4:l1RWBYGjHXK9h8Zv6cy2fjTsGD54

  Score

  10^/10

  formbookcu29discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2