Extracted

• • Target
    Paymentcopy.exe
  • Size 735KB
  • SHA256 3f8bef60842d6aa5827f315301d8b8b116a0938ed26f9da7eda3db51c104efb4
  • MD5 55148fe655d805748c8acf4dbdf5a6da
  • SHA1 74e376a4c8f628d44644b064f77c4688713ae74b
  • SHA512 346580eec3d455a7f3c9098dafa84145a5c1c3d44e7ae7ce76dc9e46ecc7d9c25cefb321d76842d08b7cbfe9cd3369a6d8ed9f7513015fa844179cc1e17fdc64
  • MD5 SHA1 SHA512

  Score

  10^/10

  rattrojanspywarestealerformbook

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2