Extracted

• • Target

    skmbt ref 10072022.exe

  • Size

    933KB

  • MD5

    dc681c0d1b1a68760efaa3d0e30c265c

  • SHA1

    b9af8e985e07a8ca11a5b81e7353428015c824ad

  • SHA256

    866ff728d933b6a13b260cb79be66e9d17069f15fb7458673d313f6d7590864a

  • SHA512

    fb1b39aba32987f6a84617870e5b3cfc9a6c54726979ad9608082b78135d91a35fd4c4ae7bd63f90c35e51d138c9d7952d93daef9ebc62f4dcbb880fd23d5de2

  • SSDEEP

    12288:wGrI2iNQxZU/LPBBmJw5afc8WBuSSVwwuizH+BllvMo3Y6J2u:wGs1gUjPBwwIWcSSSeze3d3Q

  Score

  10^/10

  formbooka1n9discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2