Extracted

• • Target

    PO91206762.exe

  • Size

    194KB

  • MD5

    54c6e68d889239ef978e4221f8add60f

  • SHA1

    500f8852aa4cf26eb57d544fa3017bbab75aafce

  • SHA256

    71cb97b67ebcc50a0bef217b3ca9591cfa49f6b8c8d11ee9952c2cde0b7b6a51

  • SHA512

    09d0bc694eababc0de157884383fff81c07b5c576bfcbfdf763b41b8a96a845b4fc29b04ccd0b82e70de085696f86afd79b94f2be210b545e0a91d0ffd793a7e

  Score

  10^/10

  formbookratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2