Extracted

• • Target

    PO-23562#TZ232.exe

  • Size

    1.5MB

  • MD5

    357a14cfd77aeee6ccdefd6306790b6e

  • SHA1

    515e8f43b3261329f2da96a7f0e873061c33cbd8

  • SHA256

    cb2e173430a404a7cf52a54db1ff96b0de6eed1b8953d96b57e2780e45e71db9

  • SHA512

    dafb6a5de58bf0a42b378c6e83271e55d28204cf1255fa702b1b312d9b6b31c68315241db9089a4ee09445c202baea1bcf51a33ce6132513bff0331c21d48682

  Score

  10^/10

  formbookratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2