Extracted

• • Target
    PO 20201013_file_xls.exe
  • Size 707KB
  • SHA256 af61853ca27001c0721463fce68bb033a9084e9fcd0c6ced3acd7fc3ea0e957a
  • MD5 6226c8dd2ad642b61e23a63b7e4f85ab
  • SHA1 2cb49d89316e2001d159822ac70a07e7ef4b776d
  • SHA512 18bc29220315e954fb4fad037d5b796b0598aef20abde538b6e83bfdd7069783fff0fdb3e560f0c45da5765504793e4892db3f037f90d2ef0813d2972e45da46
  • MD5 SHA1 SHA512

  Score

  10^/10

  rattrojanspywarestealerformbook

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2