Extracted

• • Target

    OAa3nu595dA7afB.exe

  • Size

    553KB

  • MD5

    1823dce627d29f5d4985501267f7ad9f

  • SHA1

    1ce10042fccf2c8fcb2b0a93723f24b6c3b4ffb3

  • SHA256

    c14ba2023f89dc57df157690e40042b8b090906257c59b6e5834b2212cd3142e

  • SHA512

    88421fa99979a5ed7d55a2dccffbb96af3e72539e5dba61bf7860d2321a2f79deb5e9aae65e3fb9e5a17998a60d87abbbdc7b0dc495c991b4a3813a2ef8edb72

  • SSDEEP

    12288:DMSSBQvlKxIhc8+PzqBpzZCRtDSybgO5Kdw06aDSBaEK:D0ByMstCvDS4h0dbDSB3

  Score

  10^/10

  formbookdn7rdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2