Extracted

• • Target

    NEW ORDER.exe

  • Size

    277KB

  • MD5

    fdb13566001939b797325265bc1048e0

  • SHA1

    096a63354f73bcc105030ede2f04c5bb12cf2711

  • SHA256

    3f2cdc7783014a37d7ad61ee00c226d5221d4932f4113eb3590a9c9d0447b461

  • SHA512

    faac103a3a220885b3e4ec848e384e9b8b7ce9a19ab90c97d6319106e0a00275b0d6a51ab94e63bad147e2bcb32cc8ef051705c3b5e019ae1374cfdb901bf934

  Score

  10^/10

  formbookratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2