Extracted

• • Target
    PO#101581.exe
  • Size 591KB
  • SHA256 dbf442323e19a477370d316dbbd389f48ce8c93ebd119fdb319be4f3f82d4b7f
  • MD5 7dd83d33a8462eff9f65ddb4d326b3d5
  • SHA1 48ec85c314157d9a3d5416c2e7c71cac920762a4
  • SHA512 d646369beeb5c2c6f9e0d3e5349a9c6a4d9555c79aa790c1b54fd2654b2111ef623387aa7ea039009485d59c21420559a0eee640b05a891d4a1f50918c835315
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbooksnr6ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2