Extracted

• • Target
    Proof of Payment.bat.exe
  • Size 234KB
  • SHA256 bdc84c917558fe1a4055309a8d6ad6d89d2cdf5a6741c218ace44f70489f9260
  • MD5 d5cdf1a69400a5437c38ae80637ba2d7
  • SHA1 a0322fd137b710484a71f87bec7f9269dbe3d01f
  • SHA512 ef8bd3fa53ac1aa734ca254b8bd28ad00e35d37ffce247785cf936ca366a491f5317b1a27059a524b60b14dd7302947710c51a0648fc86b763026abec729555c
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2