Extracted

• • Target
    Purchase Order.exe
  • Size 916KB
  • SHA256 419d8b92dc042882bb3261de70dfe4a158bc9ca436c71f9bf330bb8a6917d04c
  • MD5 c13f1850e9d955f826620bd1ae322368
  • SHA1 1329de0499fabc6fcffd4fa02864968acaac253e
  • SHA512 8d11bbe6afadbd108f227bb3397334f27eb69859b19e82ae436ea91a9f9b6b786c83a55a2fe0f71b15875ec51df8b19f367941420e5972eb2a06e6163aed2657
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2