Extracted

• • Target
    PAYMENT CONFIRMATION.exe
  • Size 222KB
  • SHA256 93d053f43313cccae2d3f9d00b4556429a63efb104b97e08967da8569fa2ff82
  • MD5 9df8c14c50fe690ec73aba0f8a285aa4
  • SHA1 4a1e5eaab12b6da32eabc61f026b6286f43adef2
  • SHA512 99a6f91b5bce795277853802677a91ec113b68260c28240e79571900e564e08b2efa979c31564999312cca4de54b71955faa4151783c0fe40ec7691f512c3bb2
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2