Extracted

• • Target
    Scan copy of Payment Invoice.exe
  • Size 959KB
  • SHA256 5adfadf50a8061e25c5f05d732425164f0e095ada4d8e47531f546dce9f2f3eb
  • MD5 5fda850600294bcd9f48f24cec17a28c
  • SHA1 cd051ac80fdfad3af7be6511ef1543e3010573ab
  • SHA512 dd1af5450f21b910f61d57e6c2fe7db674b4f71d060bcf9fd45b23693dfe1f16c71b8683d178cbfbb2d67b1425dda229e5244eb704f5568f06c09c280e314309
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookkgdhratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2