Extracted

• • Target
    New order PO-15547.exe
  • Size 998KB
  • SHA256 c5ad7c8c7e25d194c60bf2c6eb8fa74f7ebe319a5e1727676a2470947dc8f331
  • MD5 e33f3ee231ab39d453250ec06377f73a
  • SHA1 df5a6007d51034e463b9a3a69e7fdbbc9f07539d
  • SHA512 5a5d7206ab81639af8eac50ebdd2f52db1ae10b6ad1271f13b33c1f86300ff06494ee7ed2fdb6675d143c056fdefa53b840e333ee591a1fb76a587bb19284c96
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2