Extracted

• • Target

    877e35b50ea837ca88d9276a4c567a4fe60219bcfdd32de9eeb604693fb11ef8.exe

  • Size

    1.1MB

  • MD5

    7b7783dff1083e8bb1d8fe8e98ed2b95

  • SHA1

    8e3f34ae832960569357b279e85a8e3cc1c3a766

  • SHA256

    877e35b50ea837ca88d9276a4c567a4fe60219bcfdd32de9eeb604693fb11ef8

  • SHA512

    9a4dc41b079ca265c556002622cb15fcf98e9134f97a9f91af38c68f75fd3c6a4a43f79db7a24b6a95db540bb761c7f0d66e09a5f0298c937dbd087cbada022a

  • SSDEEP

    24576:btb20pkaCqT5TBWgNQ7aK4rc4CuoSnqbV6A+:YVg5tQ7aK4r1oSqx5+

  Score

  10^/10

  formbookud04discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2