Extracted

• • Target
    PO0119-1620 LQSB 0320 Siemens.exe
  • Size 491KB
  • SHA256 2d7c03aa083b443c2cb1f0d296d9fc1afae5b9d1894bf4d1ba98b28568cd6ab3
  • MD5 6fa685ee6fcfafa06fff885cee02fa35
  • SHA1 31699ca8184298ae75d43f8d872a511e1c6a1575
  • SHA512 6004eece74f7ece6e630aeb751942b8a680cd698f7eddb3cca556db0a811011423d9660f993030a59c9a828c7b9bbf478dcf423354de421902bc0d181574cf5e
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2