Extracted

• • Target

    YymVR8sBZWj8M7D.exe

  • Size

    741KB

  • MD5

    d7c02da16bf097bff5c23dad90bc381e

  • SHA1

    061321ea53bc1b34b07a13b5315a50a5bb575f06

  • SHA256

    fc0d84fba920cf1a075f5d5d0bbc971025595da145e4f33e5eec57d6a2303f01

  • SHA512

    ea9bdc884ce89ce837dd197a26c63da2ecb6ad9526cd7a49ccf59415f23d2e1df1ee4902e7eb6dc9528d693dabee5e566d3e514e4a317ed45a185e7ca3fb3081

  • SSDEEP

    12288:tgWVwE2yc/xQ+wjncvJnEs6uu5ajo5oY7yxSqRYi0CGBxVY1EmbGqy:qWVwEp0xpincvtExuu5E82Sqn0CGmKmo

  Score

  10^/10

  formbookdr14discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2