Extracted

• • Target
    New Purchase Order 501,689$.exe
  • Size 777KB
  • SHA256 21ac6b3466ff131a75cea134baddd37412fa73bb5b8697aad76a719346a14648
  • MD5 d1b1eef61f69d2b769d2b7dcb1acf155
  • SHA1 a866ef4760a021ddfcfdd842f904d3bcba6f528b
  • SHA512 4ad70831163d0cb4a259c2357915ff82350d197a1edfb975ee94b73b0cfe845d02b90d65b28adb04e94ac9c04bc843cc651cc0decff5db364533680997580c49
  • MD5 SHA1 SHA512

  Score

  10^/10

  rattrojanspywarestealerformbook

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Uses the VBS compiler for execution

  • Suspicious use of SetThreadContext

  behavioral1behavioral2