Extracted

• • Target
    New Purchase Order 501,689$.exe
  • Size 452KB
  • SHA256 a5101910da7817c72ebc45da2ee45900f306a86edc039c9072f6c1e890da6628
  • MD5 cdddc60bb8e588b9b77a05f0ceb170bd
  • SHA1 8f6f97aff9858b0e8e01d6b9f9569d971b4c3651
  • SHA512 7fe0d4bce819c5ce7a2c17099a2df000b64c711759b1d8cac9f353597fa2e00b6fd5c8cad4fc0968284e43b75fb33493bd37091333403cc5bf883f3a7979815a
  • MD5 SHA1 SHA512

  Score

  10^/10

  rattrojanspywarestealerformbook

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Uses the VBS compiler for execution

  • Suspicious use of SetThreadContext

  behavioral1behavioral2