Extracted

• • Target

    PO.exe

  • Size

    58.0MB

  • MD5

    39452d43693baa6d75c1a57e58186d8e

  • SHA1

    55d035bb23f2b9581a791d841067a4169d4b2221

  • SHA256

    b87631dd4125cdc5775d67fb2ec619c9772d47151d7196af7793cd10e8a377ab

  • SHA512

    07dbb8b08d02a499f8b713519110b90856b5e63314c4790552186ff3f875575408f561cec8b36e4e5f5bf9654a1fd3a2e3ab832a3217f0e37a616654d3691d9e

  Score

  10^/10

  formbookratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2