Extracted

• • Target

    QYqXYpTo9nLX2kX.exe

  • Size

    554KB

  • MD5

    7fda0310485ec8de0a5bc10e1d027284

  • SHA1

    3ada290a132e69fd88b5c9f8beac4ea2ee3655de

  • SHA256

    50b35f848446146fece2aef6b039a20230bad0040cdd39084675a466792cff52

  • SHA512

    6b9b7f0ce3959fab35bb961f53500c5a7ffc605698f765f59d661e4dd07e4408628cd1a0ae24b9cdbcaddce7973fd2154f3730901a3ef0e4cb0c2ddb125a826d

  • SSDEEP

    12288:hw5d04ufAI2LK5Td3suvB+1rA5fgZQTDVlGF7u2GfGZyVgIRi:y5d+fAtm5p3sceAFgQhgF7ulGZaR

  Score

  10^/10

  formbookoy30discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2