Extracted

• • Target

    4a85bac71b81338df2e724c587995e231dfc0b32b004cfea253b8d94422cc4ba.exe

  • Size

    1.1MB

  • MD5

    b333b741b51e1fa861d44c2846939182

  • SHA1

    1fe1597be441315cb76e8bfddf97c2344a5d206a

  • SHA256

    4a85bac71b81338df2e724c587995e231dfc0b32b004cfea253b8d94422cc4ba

  • SHA512

    c85f9f14342e6d49b9d43cf3475f91a5a54cfc4fb89397572027912f4c478b62e306ca0fa2a886e1c89e02c226583eb97eefc04fa45efa8f2d05086a12bf197c

  • SSDEEP

    24576:ctb20pkaCqT5TBWgNQ7a6Vjaab/dPQVW0hFdc6A:FVg5tQ7a6VeGV0WWFC5

  Score

  10^/10

  formbookud04discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2