Extracted

• • Target

    new order.exe

  • Size

    225KB

  • MD5

    5c24de06380c0c24db91bb3ab6eeace3

  • SHA1

    74de5b1eac0982786136b4ecb4bc664bd9d26636

  • SHA256

    b3c5b3cf581d15fcbacf67b4bdba199bfe7089704875746109b3206eb07b99e2

  • SHA512

    1ae9df468dbcaa9c1838fc4327d488843941e18e84affbdfd1d86d0b20f16c360853eff4373049e5628ee55c4e20da445dacc65c1fc4d3df56812b04733bc75b

  Score

  10^/10

  formbookratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2