Extracted

• • Target

    Shipment Document BL,INV and packing list.jpg.exe

  • Size

    231KB

  • MD5

    50456fb9b8f0806b76ffd072a5bb70f2

  • SHA1

    ec8e584acd7b5153cf50d9c338b002666e7f85d8

  • SHA256

    aca4e7d8bc5a58300b0945187c084f6c2c44418133ffb36adfb08e25d285de82

  • SHA512

    42c006d277fb4526f56523fb8fb415f7f00e66fe165cbedac2af399a9cabd01c572b76a3706daac292dc5b64e0abcfe8d6f6a5744cba5295f1abc7d3eda00fe9

  Score

  10^/10

  formbookratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2