Extracted

• • Target

    1141ba199a5fa20047536e6529c0d68c78649b590e65cc23601c60ece254f250.exe

  • Size

    1.1MB

  • MD5

    44e7e9cc5bf56fadcd12bf7e24d8d8c3

  • SHA1

    2f36d543fd5c55a9b8a55ed7a0fdab699999a936

  • SHA256

    1141ba199a5fa20047536e6529c0d68c78649b590e65cc23601c60ece254f250

  • SHA512

    e1b08f2623bf99d52c4ecfd9be0d331c1f9214b21313206ae1274070723723ee2915827f2225d76280e92b19a3891f98839d112ce097783494149f559874ed23

  • SSDEEP

    24576:Stb20pkaCqT5TBWgNQ7aF3PzM7rprIMVVMQ6AO:fVg5tQ7aF3PzMfprVx5O

  Score

  10^/10

  formbookud04discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2