Extracted

• • Target

    c419a459e0f21efa0a4df35367d1607d5999dbc28a325b9da61ed3f5f9b9ba3a.exe

  • Size

    1.1MB

  • MD5

    e2fec48293a8580213ee6fa61b37b776

  • SHA1

    00751d38864cfe890150b2e4d1bcd05c09bc80bc

  • SHA256

    c419a459e0f21efa0a4df35367d1607d5999dbc28a325b9da61ed3f5f9b9ba3a

  • SHA512

    6c580cbf6c8c9ae57f9ec67af61fed731de25c5a56a1668949b722e79a31f83e89f8a5d5deab5939cba156631842fb5134fbb722d8b1c6ca6d94f0a7e9951a55

  • SSDEEP

    24576:uRmJkcoQricOIQxiZY1iaCCudvbmcRXrAd9FTlHDKJ:7JZoQrbTFZY1iaCvpmcprAd9FTtM

  Score

  10^/10

  formbooka38mdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2