Extracted

• • Target

    zYqJmECKmhz499J.exe

  • Size

    1.1MB

  • MD5

    54a60fa86dd57e95fc68c25d2d2949a7

  • SHA1

    cac7af8b3cdeb3bc61593311f3a6851c82d01a69

  • SHA256

    b2bd364a32ee75888d9343bfc3a16b9eb58151fd94b4f3c38890f6ba2256b2e8

  • SHA512

    b95cfb7209f92084d0a70126e123d009f5b170a5526eeefcebeae136779952a02a90e4f799b18759ab21fd9c4277234cbba24f0d81b23d183dddebe49d61a692

  • SSDEEP

    12288:DJPgbYHTFyemCjEpTx0pchoZ2XjpXV8ME03wBwMfkc14c1L/UxDbX6U55uQIjLmf:XzFyEE2choONl8z0ATfkcacJYjAo

  Score

  10^/10

  formbookuegpdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2