Extracted

• • Target

    Benetti yacht Enquiry.exe

  • Size

    1.1MB

  • MD5

    ea25c184df955f5e4382ce73fe3eb6bb

  • SHA1

    da5ed9ab355a3e5912c3186e3c372b68ffddd8c1

  • SHA256

    b4932161d592d2b1c33be7ef495b873434ea47f9031e44b31338a041b22394ba

  • SHA512

    7fc6bce7097865be62bf45064120e24bbfef026adcef39ad99dbb6533fd7c4de471a67c5982ca930ba8955e991fa92fdca12c8bf1c3f97c0b9077c8a82b661b5

  • SSDEEP

    24576:cFOsBgo0q4wMMBmCmTOUd+L6kaXWUp5xzc0B4p+v/5QjK5pqiebU:cEoHMUmCm6Ud+zaXPJcaW+H5QjspqieQ

  Score

  10^/10

  discoveryformbookgmtrratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • CustAttr .NET packer

    Detects CustAttr .NET packer in memory.

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2