Extracted

• • Target
    invoice.exe
  • Size 511KB
  • SHA256 53cd0bb46c1d8aa4dc128569b2c2b2b13f0d4a1357e464e5eec019a7f11195d6
  • MD5 62be6b2cd5931c56e229fc95a7452089
  • SHA1 95a7005a45a975958e0bef9dd50411e233993056
  • SHA512 4ecc4ef3d53e88ca7ba3d08831f4224fbe9a84041519597bc69374d072e692cb8bd8be202d11e899d87024879103a32ef9b742e524b65580a8aabc4a5a82b683
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2