Extracted

• • Target

    PO210119.exe

  • Size

    1.5MB

  • MD5

    b074bc8cc313c6fcafe448ae189de963

  • SHA1

    427ad90e6f9e40c447a66dedb344c788764cbf92

  • SHA256

    f6a1cf040ecee307e3e5289f73b27664e33db21aaac5142e89b2a956934ae0c9

  • SHA512

    86067908dc9e432cb6362e1925d0aa5e57cde258d5c4dfb724a8e1dde9a273b1062e2a37d1ee82ea10ed08f7f20619ed96f5df6cad81c90d0757fd7d055b371a

  Score

  10^/10

  formbookratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2