Extracted

• • Target
    PO _ETPO.22.0418.exe
  • Size 638KB
  • SHA256 36e88428927952dcdf23b14cb7d68f6db403c2135cd1ca4d3a5338f4c6a1822e
  • MD5 8f29b60f1e8e5141ea3a4db9e08c106b
  • SHA1 c27f2820869275c7bf9486c578538ac8c0065540
  • SHA512 0d3598b15ca06e4be92bfc5891ca33199712f1a372bda39702b861273b639db9881f114c3caf1f96725307c3be69e5a324636c89d9f3d253b123adeddb0e1aa4
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2