Extracted

• • Target

    scrss.bin

  • Size

    2.1MB

  • MD5

    13a0b0388851bb224b5a71b9ad3bad48

  • SHA1

    297372dc285474cf8f587c0673ff5638c982e4f0

  • SHA256

    b062a9d743bcc3af9728b50385318d53924a65ad2defffae0ff625b6300280d1

  • SHA512

    c235917d46d9c5c7ea4af374966eb98151ec753711f620af3295b3ec9ccf835f2946deede7fd5c7a68d2b2b13829f21fb2646aca1be399a7de1c78416aee8290

  • SSDEEP

    24576:GM5ixeMI2troHK6vQssZJ/BeVIdB4Eg54uZG9q8QKXxOLXxDTUHVM38Q:B5yeMISavQs8peV6JQuM/zxaVM/

  Score

  10^/10

  formbooks0s2discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2