Extracted

• • Target
    INVOICE.exe
  • Size 234KB
  • SHA256 c59f3d09668674cc602a759071c5972b8f78b2b829afd3fb8d5e6f9ecd820280
  • MD5 38927850c68526c3b30995400fc9c33e
  • SHA1 1fba24c83e0599d27a39ea0a1fcd97aa06f74ab9
  • SHA512 0819d6acca547d1512be9be0c3b9df3e87239272b85c41ee12583fa5a2108f390deab1389227fb08061c50d81cc93d690bfbe494daa1d3faa66d07a560bd7461
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2