Extracted

• • Target
    ORDER CONFIRMATION.exe
  • Size 665KB
  • SHA256 357c55fac31eb641cb3cec37663a829e2745f3cd4af08b6fc0c1634ef3eee1b6
  • MD5 6998c8f3f3d113c70549b738074a4704
  • SHA1 1ee0d4ee5265df3d9705aa61e9e06847d3fc13f6
  • SHA512 243483291f2b360a77fc5f75a9114cd82ff253c7ecbf54875215ac42e01232de9187137d8275d63964a1c8c9bce99d5931db9bfc6c7f64da1e67b17ac57dbb44
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2