Extracted

• • Target
    Purchase order PO045793 from Voile Trading Co.exe
  • Size 338KB
  • SHA256 440210947a4e6ccdc60e1447ee39bac99cb2e3806b3d5db06d5758cc4ac6cc50
  • MD5 6e5d56265f88a6e736d94c884d1b9fac
  • SHA1 f4b3d37222250fbbe472cb36dd0efab65128b651
  • SHA512 afc23ef142f5b709d10ae7225c0a31db339543debdf2d55b86f3e724015f0e4fba44d354fd12f1de893fabb49b525608e588def63ae4f6d82c236b5897831ffc
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2