Extracted

• • Target

    USdoVn56lXoOULq.exe

  • Size

    720KB

  • MD5

    496178f82a5a471f55cfec67492c5c5c

  • SHA1

    47f3c8ab59fb3e7fcf3a8c1b4cfd22150305f5fd

  • SHA256

    0308ff4d9e1f733b474d2fa01c3a7cdb29129450188357602cd224c89927867c

  • SHA512

    68ec33a0728560f05f78f6a436947457617bed61e6dbdd78516e14bda1b10f5b38120c4d7a0c4a5e215fd647b46db3881568c2b41ff87af86e7e4c8b8993ed40

  • SSDEEP

    12288:1lDLIXPod2iNXMxDIKR9KM8DKH+4aaufLCIji4xqzLee6O639oo3F5/W+:1Dd1yUMfeUufLCIGTLJC3io3F93

  Score

  10^/10

  formbookg25ediscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2