Extracted

• • Target

    7e0b58f853b79da8504e524932bd2bfd5aabd42bd82f5f787176a615b45ffe22.exe

  • Size

    1.0MB

  • MD5

    5f4861781f0ec977e51a8a86349c6f8b

  • SHA1

    0565c7b0f212bddf7a379aaa6e9735eb1167dd57

  • SHA256

    7e0b58f853b79da8504e524932bd2bfd5aabd42bd82f5f787176a615b45ffe22

  • SHA512

    28a2c135f06bcb11fb48611aa2dbb5d5ef0aea61b6ba6f2da8bcfc892f0f91c86cefa776eb599d2bc16b317cde282baa84862c32ee54398aa9d8ba9cef9cc99a

  • SSDEEP

    24576:lu6J33O0c+JY5UZ+XC0kGso6Faw/itkLQS49GSLwxS84WY:nu0c++OCvkGs9Faw/rf4AimSiY

  Score

  10^/10

  formbooku021discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2