Extracted

• • Target

    YBCNP6X9PSJDXqv.exe

  • Size

    1.3MB

  • MD5

    4dfab4ab0edef660557d063a7b787f32

  • SHA1

    c55904a356c64da5812c07cdbc886fb64d80b2bb

  • SHA256

    9ea19e6389c42486050f45551c33bf9d8f0b2417fc53975d97aebe477d368274

  • SHA512

    94ca2be7e1ddd92abee498a1ccc44f7f79f14cab678faef4468000f2910b126aac2b4b423f050a78b2e03d1c7d19ec43908e49f6800b97dafe96de9d7a143489

  • SSDEEP

    24576:c7XzodEMQ/3Q7+GOP0p2jQSM8eqIpQ916Ry/UE8izXOHtEga:cbzec3QCGd4jQB8LvocUdibOyga

  Score

  10^/10

  formbookcsn6discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2