Extracted

• • Target

    88e7becf09f33e1db8fe108dbe9687a13bf1225ecf322a00f2e67b86a8931813

  • Size

    1.3MB

  • MD5

    85c1c3e112a22e4f23eaf97d86fef355

  • SHA1

    4922c4f1c57d740ad9f7d46bba1b18f8744277db

  • SHA256

    88e7becf09f33e1db8fe108dbe9687a13bf1225ecf322a00f2e67b86a8931813

  • SHA512

    80929585d61a0af38166c0d6b94bcc852dc05025537ec9915441ef78f270cf4759ea05f28604f63f8193e31474d6e88a81aabe725c24a8cb839cf9e1fa560f0b

  • SSDEEP

    24576:mRmJkcoQricOIQxiZY1iaI9tlv4ngXMKFXV7KeTFjt84:jJZoQrbTFZY1iaI/N4gXMKJV7Kv4

  Score

  10^/10

  formbookge07discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2