Extracted

• • Target
    PT300975-inv.exe
  • Size 546KB
  • SHA256 2858bfcb9388b05049df45459ee60bf96be0b0d75a3be34cf3c00f57ec9f4469
  • MD5 025544a9014cf1667e8a1d4ff68da253
  • SHA1 0123853e7960cdae4f3ad95945b4ec86adbb93c6
  • SHA512 a22db404c3a154339b3cd6d4a4227f319f6cb99d103346856ffd6fd249fe08bace4f528f185edc25c0672ae03b2e14c87b31b0b2d0728372c5893821b5a43068
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Suspicious use of NtCreateProcessExOtherParentProcess

  • Formbook Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2