Extracted

• • Target

    fatturadipagamento.exe

  • Size

    1.1MB

  • MD5

    1b279ea4e3f5c082c7ec98c138e86c1c

  • SHA1

    7f4a38dadd8891334f49d07359933d41c8830f67

  • SHA256

    77fa31d14cbf45df9fb36ebe8a7252e18cffca5add1d9a52a601b44367b5aad5

  • SHA512

    e441b8967f27a4f03fd5bbd1140e00394190cb92afd9c4eb3c7076ac50a424ed2102ce3e478f4550f5e3f03cb87f892733703d745637a3cdafe834b1ea4a46ca

  • SSDEEP

    24576:0RmJkcoQricOIQxiZY1iaBPXyiJqQEa7bEw20doU7OiCjNd:RJZoQrbTFZY1iaBPseEw20frid

  Score

  10^/10

  formbooknu01discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2