Extracted

• • Target

    8c1abbfb1664d990fc963b506dee588c18ed4c286c4ed0d4d5e75b74175e1af0.exe

  • Size

    1.2MB

  • MD5

    3fc2b24484dda073e49d5185f1b4d623

  • SHA1

    205ba4e3999d60014125a2d1ebb801d8eb3fea16

  • SHA256

    8c1abbfb1664d990fc963b506dee588c18ed4c286c4ed0d4d5e75b74175e1af0

  • SHA512

    b52fbe98d9a3b6ad20923155f073f60f1e15ddbcfd89b2bdaf588cc8242929545bb07dea772c9c49fe624951d84266a8333b126ecbe763ba665c0722a243c049

  • SSDEEP

    24576:Ftb20pkaCqT5TBWgNQ7adfDaeVq4v8T7r96A:2Vg5tQ7adfDaL4v8nJ5

  Score

  10^/10

  formbookud04discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2