Extracted

• • Target
    PO2020527.exe
  • Size 498KB
  • SHA256 d0c528ff38bc3df66a153a67e545e37157bc427ab0ffa215e85ce20f12a73b74
  • MD5 e4a783725163f85bc76461f6d179cc41
  • SHA1 98f5977390fd3b199e4630f37e1add42d6ee1355
  • SHA512 60772f4e4e0102128271b0f000974fc6ac37193666249435997ae76f2a37f183036dd2f18db0e242b4a09422563a6a814d36dbd27b936fa8a0d8dff5532b3ddb
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2