Extracted

• • Target

    b225f4ef997754cc29f699ca3a8aa9aa1d39661d7c3dbc6f36a7c7a5bca235ab

  • Size

    1.3MB

  • MD5

    f53e182f7f72b938a07fa2dedaff7d4c

  • SHA1

    da1d4f6b8f9e4d1ee4471dea17781a352be94c87

  • SHA256

    b225f4ef997754cc29f699ca3a8aa9aa1d39661d7c3dbc6f36a7c7a5bca235ab

  • SHA512

    43c307e58214b16601a0a3a6af2ef426add2356bd17147a1270abaea203abb47ad2efecce09dd4a95450c7a707e4088bf5029713314b993a29b96a5562678207

  • SSDEEP

    24576:ZqDEvCTbMWu7rQYlBQcBiT6rprG8aYLeZnYGANbK9Jr:ZTvC/MTQYxsWR7aYLeZYpNbkJ

  Score

  10^/10

  formbooka03ddiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2